Every CVE Search/ Get API key

CVE-2023-28488

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating...

6.5 MediumFix available

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.96%Up 0.9 points since Apr 13, 2023
90%50%10%1%

What each source reports

NVD Score used 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
CVE-2023-28488
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
CVE-2023-28488
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2023-32158 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
EUVD-2023-32158
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-vw29-hgcp-pxgr 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating...

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
GHSA-vw29-hgcp-pxgr
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
CVE-2023-28488
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-28488 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
DEBIAN-CVE-2023-28488
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2023-28488 6.5

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Record
UBUNTU-CVE-2023-28488
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2023-0167 No score

Updated connman packages fix security vulnerability

client.c in gdhcp in ConnMan could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process. (CVE-2023-28488)

Record
MGASA-2023-0167
Updated
2026-11-02
OSVopenSUSE-SU-2023:0369-1 No score

Security update for connman

This update for connman fixes the following issues:

Update to 1.42

  • Fix issue with iwd and signal strength calculation.
  • Fix issue with iwd and handling service removal.
  • Fix issue with iwd and handling new connections.
  • Fix issue with handling default online check URL.
  • Fix issue with handling nameservers refresh.
  • Fix issue with handling proxy from DHCP lease. (boo#1210395 CVE-2023-28488)
  • Fix issue with handling multiple proxies from PAC.
  • Fix issue with handling manual time update changes.
  • Fix issue with handling invalid gateway routes.
  • Fix issue with handling hidden WiFi agent requests.
  • Fix issue with handling WiFi SAE authentication failure.
  • Fix issue with handling DNS Proxy and TCP server replies.
  • Add support for regulatory domain following timezone.
  • Add support for localtime configuration option.
Record
openSUSE-SU-2023:0369-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0370-1 No score

Security update for connman

This update for connman fixes the following issues:

  • Update to 1.42

    • Fix issue with iwd and signal strength calculation.
    • Fix issue with iwd and handling service removal.
    • Fix issue with iwd and handling new connections.
    • Fix issue with handling default online check URL.
    • Fix issue with handling nameservers refresh.
    • Fix issue with handling proxy from DHCP lease. (boo#1210395 CVE-2023-28488)
    • Fix issue with handling multiple proxies from PAC.
    • Fix issue with handling manual time update changes.
    • Fix issue with handling invalid gateway routes.
    • Fix issue with handling hidden WiFi agent requests.
    • Fix issue with handling WiFi SAE authentication failure.
    • Fix issue with handling DNS Proxy and TCP server replies.
    • Add support for regulatory domain following timezone.
    • Add support for localtime configuration option.
Record
openSUSE-SU-2023:0370-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13420-1 No score

connman-1.42-1.1 on GA media

These are all security issues fixed in the connman-1.42-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13420-1
Updated
2026-11-02
OSVUSN-6236-1 No score

connman vulnerabilities

It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-26675, CVE-2021-33833)

It was discovered that ConnMan could be made to leak sensitive information via the gdhcp component. A remote attacker could possibly use this issue to obtain information for further exploitation. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-26676)

It was discovered that ConnMan could be made to read out of bounds. A remote attacker could possibly use this issue to case ConnMan to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-23096, CVE-2022-23097)

It was discovered that ConnMan could be made to run into an infinite loop. A remote attacker could possibly use this issue to cause ConnMan to consume resources and to stop operating, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-23098)

It was discovered that ConnMan could be made to write out of bounds via the gweb component. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32292)

It was discovered that ConnMan did not properly manage memory under certain circumstances. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32293)

It was discovered that ConnMan could be made to write out of bounds via the gdhcp component. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-28488)

Record
USN-6236-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
connman
Debian:12
 before 1.41-3
1.41-3
connman
Debian:13
 before 1.41-3
1.41-3
connman
Debian:14
 before 1.41-3
1.41-3
connman
Debian:10
 before 1.36-2.1~deb10u5, plus listed versions
1.36-21.36-2.1~deb10u11.36-2.1~deb10u21.36-2.1~deb10u31.36-2.1~deb10u4
1.36-2.1~deb10u5
connman
Debian:11
 before 1.36-2.2+deb11u2, plus listed versions
1.36-2.21.36-2.2+deb11u1
1.36-2.2+deb11u2
connman
Mageia:8
 before 1.38-2.4.mga8
1.38-2.4.mga8
connman
Ubuntu:Pro:16.04:LTS
 before 1.21-1.2+deb8u1ubuntu0.1~esm1, plus listed versions
1.21-1.21.21-1.2build11.21-1.2build21.21-1.2+deb8u1build0.16.04.1
1.21-1.2+deb8u1ubuntu0.1~esm1
connman
Ubuntu:Pro:18.04:LTS
 before 1.35-6ubuntu0.1~esm1, plus listed versions
1.35-11.35-21.35-6
1.35-6ubuntu0.1~esm1
connman
Ubuntu:20.04:LTS
 before 1.36-2ubuntu0.1, plus listed versions
1.36-2build1
1.36-2ubuntu0.1
connman
Ubuntu:22.04:LTS
 before 1.36-2.3ubuntu0.1, plus listed versions
1.36-2.2build11.36-2.31.36-2.3build1
1.36-2.3ubuntu0.1
Show 5 moreShow less
Affected packages
PackageAffectedFixed
connman
SUSE:Package Hub 15 SP5
 before 1.42-bp155.4.3.1
1.42-bp155.4.3.1
connman
openSUSE:Leap 15.5
 before 1.42-bp155.4.3.1
1.42-bp155.4.3.1
connman
SUSE:Package Hub 15 SP4
 before 1.42-bp154.2.6.1
1.42-bp154.2.6.1
connman
openSUSE:Leap 15.4
 before 1.42-bp154.2.6.1
1.42-bp154.2.6.1
connman
openSUSE:Tumbleweed
 before 1.42-1.1
1.42-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-28488 is a medium vulnerability (CVSS 6.5) in Intel Connman, published April 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in connman 1.41-3.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open