CVE-2012-2320
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows...
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
Exploit likelihood
What each source reports
NVD Score used
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
CVE-2012-2320- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
CVE-2012-2320- Updated
- 2026-11-02
EUVDEUVD-2012-2313 No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
EUVD-2012-2313- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hrhq-658c-r72w No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows...
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
GHSA-hrhq-658c-r72w- Updated
- 2026-11-02
OSV No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
CVE-2012-2320- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2320 No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
DEBIAN-CVE-2012-2320- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2320 No score
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
- Record
UBUNTU-CVE-2012-2320- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2320 is a high vulnerability (CVSS 7.8) in Connman, published May 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. Fixed in connman 1.0-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/75465
git.kernel.org?p=network/connman/connman.git%3Ba=commit%3Bh=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618
osvdb.org/81704
openwall.com/lists/oss-security/2012/05/07/6
security.gentoo.org/glsa/glsa-201205-02.xml
Show 14 moreShow less
securityfocus.com/bid/53406
secunia.com/advisories/49033
bugzilla.novell.com/show_bug.cgi?id=715172
nvd.nist.gov/vuln/detail/CVE-2012-2320
github.com/advisories/GHSA-hrhq-658c-r72w
security-tracker.debian.org/tracker/CVE-2012-2320
ubuntu.com/security/CVE-2012-2320
cve.org/CVERecord?id=CVE-2012-2320