CVE-2012-2320
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows...
CVE-2012-2320 is a high vulnerability (CVSS 7.8) in Connman, published May 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. Fixed in connman 1.0-1.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 2.50%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.0-1connman +2 more
Description
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
CVE-2012-2320- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
CVE-2012-2320- Updated
- 2026-11-02
EUVDEUVD-2012-2313No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
EUVD-2012-2313- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hrhq-658c-r72wNo score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows...
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
GHSA-hrhq-658c-r72w- Updated
- 2026-11-02
OSVNo score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
CVE-2012-2320- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2320No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
DEBIAN-CVE-2012-2320- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2320No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
UBUNTU-CVE-2012-2320- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/75465
git.kernel.org?p=network/connman/connman.git%3Ba=commit%3Bh=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618
osvdb.org/81704
openwall.com/lists/oss-security/2012/05/07/6
security.gentoo.org/glsa/glsa-201205-02.xml
Show 14 moreShow less
securityfocus.com/bid/53406
secunia.com/advisories/49033
bugzilla.novell.com/show_bug.cgi?id=715172
nvd.nist.gov/vuln/detail/CVE-2012-2320
github.com/advisories/GHSA-hrhq-658c-r72w
security-tracker.debian.org/tracker/CVE-2012-2320
ubuntu.com/security/CVE-2012-2320
cve.org/CVERecord?id=CVE-2012-2320