{"id":"CVE-2022-32293","aliases":["DEBIAN-CVE-2022-32293","DLA-3105-1","DLA-3144-1","DSA-5231-1","EUVD-2022-53486","GHSA-3j9x-j374-vq65","MGASA-2022-0319","UBUNTU-CVE-2022-32293","USN-6236-1","openSUSE-SU-2022:10076-1","openSUSE-SU-2022:10134-1","openSUSE-SU-2024:12221-1"],"status":"published","title":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to...","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0205,"percentile":0.81394,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-08-02T18:21:29Z","modified":"2026-11-03T06:02:36Z","fixes":[{"ecosystem":"Debian:12","package":"connman","fixed_in":["1.41-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"connman","fixed_in":["1.41-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"connman","fixed_in":["1.41-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","fixed_in":["1.21-1.2+deb8u1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","fixed_in":["1.35-6ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"connman","fixed_in":["1.36-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"connman","fixed_in":["1.36-2.3ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1~deb10u3"}]}],"versions":["1.36-2","1.36-2.1~deb10u1","1.36-2.1~deb10u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.1~deb10u4"}]}],"versions":["1.36-2","1.36-2.1~deb10u1","1.36-2.1~deb10u2","1.36-2.1~deb10u3"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.2+deb11u1"}]}],"versions":["1.36-2.2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38-2.3.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-1.2+deb8u1ubuntu0.1~esm1"}]}],"versions":["1.21-1.2","1.21-1.2build1","1.21-1.2build2","1.21-1.2+deb8u1build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-6ubuntu0.1~esm1"}]}],"versions":["1.35-1","1.35-2","1.35-6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2ubuntu0.1"}]}],"versions":["1.36-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.3ubuntu0.1"}]}],"versions":["1.36-2.2build1","1.36-2.3","1.36-2.3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-1.2+deb8u1ubuntu0.1~esm1"}]}],"versions":["1.21-1.2","1.21-1.2build1","1.21-1.2build2","1.21-1.2+deb8u1build0.16.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-6ubuntu0.1~esm1"}]}],"versions":["1.35-1","1.35-2","1.35-6"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2ubuntu0.1"}]}],"versions":["1.36-2build1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2.3ubuntu0.1"}]}],"versions":["1.36-2.2build1","1.36-2.3","1.36-2.3build1"],"bundled":9},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-bp154.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-bp154.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-bp153.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-bp153.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"connman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-4.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"intel","product":"connman"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1200190","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lore.kernel.org/connman/20220801080043.4861-3-wagi%40monom.org/","tags":["x_transferred","Patch","web"]},{"url":"https://lore.kernel.org/connman/20220801080043.4861-1-wagi%40monom.org/","tags":["x_transferred","Patch","web"]},{"url":"https://www.debian.org/security/2022/dsa-5231","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202310-21","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32293","tags":["advisory"]},{"url":"https://lore.kernel.org/connman/20220801080043.4861-1-wagi@monom.org/","tags":["report"]},{"url":"https://lore.kernel.org/connman/20220801080043.4861-3-wagi@monom.org/","tags":["report"]},{"url":"https://github.com/advisories/GHSA-3j9x-j374-vq65"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32293.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-32293","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0319.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30698","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UWUYL7FE7EBPBC7ZEMY2Q5OKW2V6KZ5F/","tags":["web","advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-32293","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6236-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28488","tags":["report"]},{"url":"https://bugzilla.suse.com/1200189","tags":["report"]},{"url":"https://bugzilla.suse.com/1200190","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32293","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B4BBTRFMU2YGB6OYSRTK6AGKO32CD5I3/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-32293","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-03T00:00:00Z","modified":"2024-08-03T07:39:50.262Z","updated_at":"2026-11-02T14:34:36.578327Z"}],"euvd":[{"id":"EUVD-2022-53486","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-03T00:00:00Z","modified":"2024-08-03T07:39:50Z","updated_at":"2026-11-03T03:25:31.965622Z"}],"ghsa":[{"id":"GHSA-3j9x-j374-vq65","title":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to...","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-04T00:00:22Z","modified":"2023-12-30T05:04:59Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:18.128107Z"}],"nvd":[{"id":"CVE-2022-32293","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-03T14:15:08.667Z","modified":"2026-06-17T04:47:04.9Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:24.39467Z"}],"osv":[{"id":"UBUNTU-CVE-2022-32293","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-03T14:15:00Z","modified":"2026-04-22T13:25:54.470228Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CVE-2022-32293","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-03T00:00:00Z","modified":"2026-10-28T02:30:47.188245172Z","updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DEBIAN-CVE-2022-32293","description":"In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.","status":"published","published":"2022-08-03T14:15:08.667Z","modified":"2026-11-03T06:02:36.542398819Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"DLA-3105-1","title":"connman - security update","status":"published","published":"2022-09-13T00:00:00Z","modified":"2026-03-09T01:18:56.246649Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3144-1","title":"connman - security update","status":"published","published":"2022-10-10T00:00:00Z","modified":"2026-03-09T01:20:19.626149Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5231-1","title":"connman - security update","status":"published","published":"2022-09-17T00:00:00Z","modified":"2026-03-09T02:10:13.690849Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0319","title":"Updated connman packages fix security vulnerability","description":"In ConnMan through 1.41, remote attackers able to send HTTP requests to\nthe gweb component are able to exploit a heap-based buffer overflow in\nreceived_data to execute code. (CVE-2022-32292)\n\nIn ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP\nquery could be used to trigger a use-after-free in WISPR handling, leading\nto crashes or code execution. (CVE-2022-32293)\n","status":"published","published":"2022-09-07T05:27:53Z","modified":"2026-04-16T04:43:32.690572652Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2022:10076-1","title":"Security update for connman","description":"This update for connman fixes the following issues:\n\n- CVE-2022-32292: Add refcounting to wispr portal detection to avoid heap overflow (boo#1200190)\n- CVE-2022-32292: Fix OOB write in received_data (boo#1200189)\n","status":"published","published":"2022-08-02T18:21:29Z","modified":"2026-02-04T04:19:18.679253Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2022:10134-1","title":"Security update for connman","description":"This update for connman fixes the following issues:\n\n- CVE-2022-32292: Add refcounting to wispr portal detection to avoid heap overflow (boo#1200190)\n- CVE-2022-32292: Fix OOB write in received_data (boo#1200189)\n","status":"published","published":"2022-09-30T15:42:02Z","modified":"2025-05-07T18:14:08.400074Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12221-1","title":"connman-1.41-4.1 on GA media","description":"These are all security issues fixed in the connman-1.41-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:24:13.194583Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"USN-6236-1","title":"connman vulnerabilities","description":"It was discovered that ConnMan could be made to write out of bounds. A\nremote attacker could possibly use this issue to cause ConnMan to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2021-26675, CVE-2021-33833)\n\nIt was discovered that ConnMan could be made to leak sensitive information\nvia the gdhcp component. A remote attacker could possibly use this issue\nto obtain information for further exploitation. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-26676)\n\nIt was discovered that ConnMan could be made to read out of bounds. A\nremote attacker could possibly use this issue to case ConnMan to crash,\nresulting in a denial of service. This issue only affected Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2022-23096, CVE-2022-23097)\n\nIt was discovered that ConnMan could be made to run into an infinite loop.\nA remote attacker could possibly use this issue to cause ConnMan to\nconsume resources and to stop operating, resulting in a denial of service.\nThis issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, and Ubuntu 22.04 LTS. (CVE-2022-23098)\n\nIt was discovered that ConnMan could be made to write out of bounds via\nthe gweb component. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32292)\n\nIt was discovered that ConnMan did not properly manage memory under\ncertain circumstances. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32293)\n\nIt was discovered that ConnMan could be made to write out of bounds via\nthe gdhcp component. A remote attacker could possibly use this issue to\ncause ConnMan to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2023-28488)\n","status":"published","published":"2023-07-19T08:45:49Z","modified":"2026-06-25T13:32:12.092508863Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}