{"id":"CVE-2021-26675","aliases":["ALPINE-CVE-2021-26675","DEBIAN-CVE-2021-26675","DLA-2552-1","DSA-4847-1","EUVD-2021-13468","GHSA-p5r5-rf4r-f8jm","MGASA-2021-0195","UBUNTU-CVE-2021-26675","USN-6236-1","openSUSE-SU-2021:0416-1","openSUSE-SU-2021:0452-1","openSUSE-SU-2024:10692-1"],"status":"published","title":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network...","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01358,"percentile":0.72074,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2021-02-08T00:00:00Z","modified":"2026-11-03T06:32:27Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"connman","fixed_in":["1.39-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"connman","fixed_in":["1.36-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"connman","fixed_in":["1.36-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"connman","fixed_in":["1.36-2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","fixed_in":["1.35-6ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"connman","fixed_in":["1.36-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33-3+deb9u2"}]}],"versions":["1.33-3","1.33-3+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1~deb10u1"}]}],"versions":["1.36-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37-1.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-6ubuntu0.1~esm1"}]}],"versions":["1.35-1","1.35-2","1.35-6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2ubuntu0.1"}]}],"versions":["1.36-2build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-1.2+deb8u1ubuntu0.1~esm1"}]}],"versions":["1.21-1.2","1.21-1.2build1","1.21-1.2build2","1.21-1.2+deb8u1build0.16.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-6ubuntu0.1~esm1"}]}],"versions":["1.35-1","1.35-2","1.35-6"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2ubuntu0.1"}]}],"versions":["1.36-2build1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.3ubuntu0.1"}]}],"versions":["1.36-2.2build1","1.36-2.3","1.36-2.3build1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-lp152.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39-bp152.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40-2.2"}]}],"bundled":4}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"intel","product":"connman"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1181751","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"https://www.openwall.com/lists/oss-security/2021/02/08/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=e4079a20f617a4b076af503f6e4e8b0304c9f2cb","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4847","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://kunnamon.io/tbone/","tags":["x_refsource_MISC","x_transferred","Technical Description","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202107-29","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26675"},{"url":"https://github.com/advisories/GHSA-p5r5-rf4r-f8jm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-26675","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-26675","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0195.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26675","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6236-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28488","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OTS3LYTIBT7XMBIAK6RCJOKOTPNIEQSF/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181751","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26676","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6R3XK5JUBLJRIRVG3PVC2DOVU5KBVK/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33833","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-26675","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T15:47:25Z","modified":"2024-08-03T20:26:25.54Z","updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2021-13468","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T15:47:25Z","modified":"2024-08-03T20:26:25Z","updated_at":"2026-11-03T03:24:51.40664Z"}],"ghsa":[{"id":"GHSA-p5r5-rf4r-f8jm","title":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network...","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2022-05-24T17:41:38Z","modified":"2023-01-29T05:05:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:45.932105Z"}],"nvd":[{"id":"CVE-2021-26675","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T16:15:12.453Z","modified":"2026-06-17T03:43:37.04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:50.031227Z"}],"osv":[{"id":"ALPINE-CVE-2021-26675","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T16:15:12.453Z","modified":"2026-11-03T06:32:27.740474059Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"CVE-2021-26675","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T16:15:12.453Z","modified":"2026-10-24T10:31:04.778570597Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"DEBIAN-CVE-2021-26675","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T16:15:12.453Z","modified":"2026-10-23T18:04:49.676321265Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"UBUNTU-CVE-2021-26675","description":"A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.","status":"published","published":"2021-02-09T16:15:00Z","modified":"2026-04-22T12:50:04.834935Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"DLA-2552-1","title":"connman - security update","status":"published","published":"2021-02-09T00:00:00Z","modified":"2026-03-09T01:21:20.849525Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4847-1","title":"connman - security update","status":"published","published":"2021-02-08T00:00:00Z","modified":"2026-03-09T02:11:01.835797Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0195","title":"Updated connman packages fix security vulnerabilities","description":"A remote information leak vulnerability and a remote buffer overflow\nvulnerability were discovered in ConnMan, which could result in denial of\nservice or the execution of arbitrary code (CVE-2021-26675, CVE-2021-26676).\n","status":"published","published":"2021-04-23T22:53:14Z","modified":"2026-04-16T04:43:01.659100673Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0416-1","title":"Security update for connman","description":"This update for connman fixes the following issues:\n\nUpdate to 1.39 (boo#1181751):\n\n* Fix issue with scanning state synchronization and iwd.\n* Fix issue with invalid key with 4-way handshake offloading.\n* Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)\n* Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)\n\nUpdate to 1.38:\n\n* Fix issue with online check on IP address update.\n* Fix issue with OpenVPN and encrypted private keys.\n* Fix issue with finishing of VPN connections.\n* Add support for updated stable iwd APIs.\n* Add support for WireGuard networks.\n\nUpdate to 1.37:\n\n* Fix issue with handling invalid gateway addresses.\n* Fix issue with handling updates of default gateway.\n* Fix issue with DHCP servers that require broadcast flag.\n* Add support for option to use gateways as time servers.\n* Add support for option to select default technology.\n* Add support for Address Conflict Detection (ACD).\n* Add support for IPv6 iptables management.\n\nChange in 1.36:\n\n* Fix issue with DNS short response on error handling.\n* Fix issue with handling incoming DNS requests.\n* Fix issue with handling empty timeserver list.\n* Fix issue with incorrect DHCP byte order.\n* Fix issue with AllowDomainnameUpdates handling.\n* Fix issue with IPv4 link-local IP conflict error.\n* Fix issue with handling WISPr over TLS connections.\n* Fix issue with WiFi background scanning handling.\n* Fix issue with WiFi disconnect+connect race condition.\n* Fix issue with WiFi scanning and tethering operation.\n* Fix issue with WiFi security change handling.\n* Fix issue with missing signal for WPS changes.\n* Fix issue with online check retry handling.\n* Add support for systemd-resolved backend.\n* Add support for mDNS configuration setup.\n\n","status":"published","published":"2021-03-16T17:06:21Z","modified":"2026-02-04T02:55:57.168153Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0452-1","title":"Security update for connman","description":"This update for connman fixes the following issues:\n\nUpdate to 1.39 (boo#1181751):\n\n* Fix issue with scanning state synchronization and iwd.\n* Fix issue with invalid key with 4-way handshake offloading.\n* Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)\n* Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)\n\nUpdate to 1.38:\n\n* Fix issue with online check on IP address update.\n* Fix issue with OpenVPN and encrypted private keys.\n* Fix issue with finishing of VPN connections.\n* Add support for updated stable iwd APIs.\n* Add support for WireGuard networks.\n\nUpdate to 1.37:\n\n* Fix issue with handling invalid gateway addresses.\n* Fix issue with handling updates of default gateway.\n* Fix issue with DHCP servers that require broadcast flag.\n* Add support for option to use gateways as time servers.\n* Add support for option to select default technology.\n* Add support for Address Conflict Detection (ACD).\n* Add support for IPv6 iptables management.\n\nChange in 1.36:\n\n* Fix issue with DNS short response on error handling.\n* Fix issue with handling incoming DNS requests.\n* Fix issue with handling empty timeserver list.\n* Fix issue with incorrect DHCP byte order.\n* Fix issue with AllowDomainnameUpdates handling.\n* Fix issue with IPv4 link-local IP conflict error.\n* Fix issue with handling WISPr over TLS connections.\n* Fix issue with WiFi background scanning handling.\n* Fix issue with WiFi disconnect+connect race condition.\n* Fix issue with WiFi scanning and tethering operation.\n* Fix issue with WiFi security change handling.\n* Fix issue with missing signal for WPS changes.\n* Fix issue with online check retry handling.\n* Add support for systemd-resolved backend.\n* Add support for mDNS configuration setup.\n\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-03-20T13:05:14Z","modified":"2026-02-04T03:02:08.893002Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10692-1","title":"connman-1.40-2.2 on GA media","description":"These are all security issues fixed in the connman-1.40-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:09.262633Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-6236-1","title":"connman vulnerabilities","description":"It was discovered that ConnMan could be made to write out of bounds. A\nremote attacker could possibly use this issue to cause ConnMan to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2021-26675, CVE-2021-33833)\n\nIt was discovered that ConnMan could be made to leak sensitive information\nvia the gdhcp component. A remote attacker could possibly use this issue\nto obtain information for further exploitation. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-26676)\n\nIt was discovered that ConnMan could be made to read out of bounds. A\nremote attacker could possibly use this issue to case ConnMan to crash,\nresulting in a denial of service. This issue only affected Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2022-23096, CVE-2022-23097)\n\nIt was discovered that ConnMan could be made to run into an infinite loop.\nA remote attacker could possibly use this issue to cause ConnMan to\nconsume resources and to stop operating, resulting in a denial of service.\nThis issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, and Ubuntu 22.04 LTS. (CVE-2022-23098)\n\nIt was discovered that ConnMan could be made to write out of bounds via\nthe gweb component. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32292)\n\nIt was discovered that ConnMan did not properly manage memory under\ncertain circumstances. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32293)\n\nIt was discovered that ConnMan could be made to write out of bounds via\nthe gdhcp component. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2023-28488)\n","status":"published","published":"2023-07-19T08:45:49Z","modified":"2026-06-25T13:32:12.092508863Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}