{"id":"CVE-2022-23097","aliases":["ALPINE-CVE-2022-23097","DEBIAN-CVE-2022-23097","DLA-2915-1","DLA-3144-1","DSA-5231-1","EUVD-2022-28202","GHSA-4hjq-w453-32w2","MGASA-2022-0045","UBUNTU-CVE-2022-23097","USN-6236-1","openSUSE-SU-2024:11792-1"],"status":"published","title":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a...","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02372,"percentile":0.83977,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-01-28T00:00:00Z","modified":"2026-11-03T08:02:11Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"connman","fixed_in":["1.41-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"connman","fixed_in":["1.36-2.4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"connman","fixed_in":["1.36-2.4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"connman","fixed_in":["1.36-2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","fixed_in":["1.21-1.2+deb8u1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","fixed_in":["1.35-6ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"connman","fixed_in":["1.36-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"connman","fixed_in":["1.36-2.3ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.4"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33-3+deb9u3"}]}],"versions":["1.33-3","1.33-3+deb9u1","1.33-3+deb9u2"],"bundled":4},{"source":"osv","ecosystem":"Debian:10","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1~deb10u4"}]}],"versions":["1.36-2","1.36-2.1~deb10u1","1.36-2.1~deb10u2","1.36-2.1~deb10u3"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.2+deb11u1"}]}],"versions":["1.36-2.2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38-2.2.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-1.2+deb8u1ubuntu0.1~esm1"}]}],"versions":["1.21-1.2","1.21-1.2build1","1.21-1.2build2","1.21-1.2+deb8u1build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-6ubuntu0.1~esm1"}]}],"versions":["1.35-1","1.35-2","1.35-6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2ubuntu0.1"}]}],"versions":["1.36-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.3ubuntu0.1"}]}],"versions":["1.36-2.2build1","1.36-2.3","1.36-2.3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-1.2+deb8u1ubuntu0.1~esm1"}]}],"versions":["1.21-1.2","1.21-1.2build1","1.21-1.2build2","1.21-1.2+deb8u1build0.16.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-6ubuntu0.1~esm1"}]}],"versions":["1.35-1","1.35-2","1.35-6"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2ubuntu0.1"}]}],"versions":["1.36-2build1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.3ubuntu0.1"}]}],"versions":["1.36-2.2build1","1.36-2.3","1.36-2.3build1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-1.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"intel","product":"connman"}],"references":[{"url":"https://git.kernel.org/pub/scm/network/connman/connman.git/log/","tags":["x_transferred","Product","Third Party Advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/25/1","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5231","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202310-21","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23097","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4hjq-w453-32w2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-23097","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23097.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23097","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0045.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23097","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6236-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28488","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23098","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-23097","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T00:00:00Z","modified":"2024-11-19T19:10:45.191Z","updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-28202","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T00:00:00Z","modified":"2024-11-19T19:10:45Z","updated_at":"2026-11-03T00:04:55.23264Z"}],"ghsa":[{"id":"GHSA-4hjq-w453-32w2","title":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a...","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-02-10T00:01:11Z","modified":"2023-11-09T05:04:02Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:54:56.096891Z"}],"nvd":[{"id":"CVE-2022-23097","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T16:15:07.943Z","modified":"2026-06-17T04:29:30.45Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:11.52734Z"}],"osv":[{"id":"ALPINE-CVE-2022-23097","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T16:15:07.943Z","modified":"2026-11-03T07:30:29.783899634Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"DEBIAN-CVE-2022-23097","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T16:15:07.943Z","modified":"2026-11-03T08:02:11.323624711Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"UBUNTU-CVE-2022-23097","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T16:15:00Z","modified":"2026-04-22T13:17:36.12903Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CVE-2022-23097","description":"An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.","status":"published","published":"2022-01-28T00:00:00Z","modified":"2026-10-28T02:30:22.067915916Z","updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"DLA-2915-1","title":"connman - security update","status":"published","published":"2022-02-09T00:00:00Z","modified":"2026-03-09T01:17:47.614854Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3144-1","title":"connman - security update","status":"published","published":"2022-10-10T00:00:00Z","modified":"2026-03-09T01:20:19.626149Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5231-1","title":"connman - security update","status":"published","published":"2022-09-17T00:00:00Z","modified":"2026-03-09T02:10:13.690849Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0045","title":"Updated connman packages fix security vulnerability","description":"TCP Receive Path does not Check for Presence of Sufficient Header Data.\n(CVE-2022-23096)\n\nPossibly invalid memory reference in 'strnlen()' call in\n'forward_dns_reply()'. (CVE-2022-23097)\n\nTCP Receive Path Triggers 100 % CPU loop if DNS server does not Send Back\nData. (CVE-2022-23098)\n","status":"published","published":"2022-02-02T21:29:30Z","modified":"2026-04-16T04:42:11.49910005Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11792-1","title":"connman-1.41-1.1 on GA media","description":"These are all security issues fixed in the connman-1.41-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:32:41.302462Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"USN-6236-1","title":"connman vulnerabilities","description":"It was discovered that ConnMan could be made to write out of bounds. A\nremote attacker could possibly use this issue to cause ConnMan to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2021-26675, CVE-2021-33833)\n\nIt was discovered that ConnMan could be made to leak sensitive information\nvia the gdhcp component. A remote attacker could possibly use this issue\nto obtain information for further exploitation. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-26676)\n\nIt was discovered that ConnMan could be made to read out of bounds. A\nremote attacker could possibly use this issue to case ConnMan to crash,\nresulting in a denial of service. This issue only affected Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2022-23096, CVE-2022-23097)\n\nIt was discovered that ConnMan could be made to run into an infinite loop.\nA remote attacker could possibly use this issue to cause ConnMan to\nconsume resources and to stop operating, resulting in a denial of service.\nThis issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, and Ubuntu 22.04 LTS. (CVE-2022-23098)\n\nIt was discovered that ConnMan could be made to write out of bounds via\nthe gweb component. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32292)\n\nIt was discovered that ConnMan did not properly manage memory under\ncertain circumstances. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32293)\n\nIt was discovered that ConnMan could be made to write out of bounds via\nthe gdhcp component. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2023-28488)\n","status":"published","published":"2023-07-19T08:45:49Z","modified":"2026-06-25T13:32:12.092508863Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}