Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6236-1
HistoryJul 19, 2023 - 12:00 a.m.

ConnMan vulnerabilities

2023-07-1900:00:00
ubuntu.com
40
connman
ubuntu
vulnerabilities
out of bounds
sensitive information
denial of service
infinite loop
gdhcp
gweb
memory management

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

JSON

Releases

  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • connman - Intel Connection Manager daemon

Details

It was discovered that ConnMan could be made to write out of bounds. A
remote attacker could possibly use this issue to cause ConnMan to crash,
resulting in a denial of service, or possibly execute arbitrary code. This
issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2021-26675, CVE-2021-33833)

It was discovered that ConnMan could be made to leak sensitive information
via the gdhcp component. A remote attacker could possibly use this issue
to obtain information for further exploitation. This issue only affected
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-26676)

It was discovered that ConnMan could be made to read out of bounds. A
remote attacker could possibly use this issue to case ConnMan to crash,
resulting in a denial of service. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2022-23096, CVE-2022-23097)

It was discovered that ConnMan could be made to run into an infinite loop.
A remote attacker could possibly use this issue to cause ConnMan to
consume resources and to stop operating, resulting in a denial of service.
This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04
LTS, and Ubuntu 22.04 LTS. (CVE-2022-23098)

It was discovered that ConnMan could be made to write out of bounds via
the gweb component. A remote attacker could possibly use this issue to
cause ConnMan to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32292)

It was discovered that ConnMan did not properly manage memory under
certain circumstances. A remote attacker could possibly use this issue to
cause ConnMan to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-32293)

It was discovered that ConnMan could be made to write out of bounds via
the gdhcp component. A remote attacker could possibly use this issue to
cause ConnMan to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2023-28488)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchconnman< 1.41-2ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchconnman-dbgsym< 1.41-2ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchconnman-dev< 1.41-2ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchconnman-doc< 1.41-2ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchconnman-vpn< 1.41-2ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchconnman-vpn-dbgsym< 1.41-2ubuntu0.23.04.1UNKNOWN
Ubuntu22.04noarchconnman< 1.36-2.3ubuntu0.1UNKNOWN
Ubuntu22.04noarchconnman-dbgsym< 1.36-2.3ubuntu0.1UNKNOWN
Ubuntu22.04noarchconnman-dev< 1.36-2.3ubuntu0.1UNKNOWN
Ubuntu22.04noarchconnman-doc< 1.36-2.3ubuntu0.1UNKNOWN
Rows per page:
1-10 of 321

Related

openvas 18
nessus 16
osv 9
gentoo 2
debian 9
redhatcve 1
mageia 5
suse 5
archlinux 2
ubuntucve 9
nvd 9
cve 9
debiancve 9
cvelist 9
prion 9
veracode 9
cnvd 2
alpinelinux 8
zdi 2
openvas
openvas
Ubuntu: Security Advisory (USN-6236-1)
2023-07-20 00:00:00
Debian: Security Advisory (DSA-5231-1)
2022-09-20 00:00:00
Debian: Security Advisory (DLA-3144-1)
2022-10-11 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : ConnMan vulnerabilities (USN-6236-1)
2023-07-19 00:00:00
Debian DSA-5231-1 : connman - security update
2022-09-20 00:00:00
GLSA-202310-21 : ConnMan: Multiple Vulnerabilities
2023-10-31 00:00:00
osv
osv
connman vulnerabilities
2023-07-19 08:45:49
connman - security update
2022-09-17 00:00:00
connman - security update
2022-02-09 00:00:00
gentoo
gentoo
ConnMan: Multiple Vulnerabilities
2023-10-31 00:00:00
ConnMan: Multiple vulnerabilities
2021-07-12 00:00:00
debian
debian
[SECURITY] [DSA 5231-1] connman security update
2022-09-17 15:55:45
[SECURITY] [DLA 2915-1] connman security update
2022-02-09 10:05:47
[SECURITY] [DLA 3144-1] connman security update
2022-10-10 18:09:19
redhatcve
redhatcve
CVE-2022-23098
2022-05-20 23:42:48
mageia
mageia
Updated connman packages fix security vulnerability
2022-02-03 00:29:30
Updated connman packages fix security vulnerability
2022-09-07 08:27:53
Updated connman packages fix security vulnerabilities
2021-04-24 01:53:14
suse
suse
Security update for connman (critical)
2022-08-02 00:00:00
Security update for connman (moderate)
2021-03-16 00:00:00
Security update for connman (critical)
2022-09-30 00:00:00
archlinux
archlinux
[ASA-202102-24] connman: multiple issues
2021-02-12 00:00:00
[ASA-202106-44] connman: arbitrary code execution
2021-06-16 00:00:00
ubuntucve
ubuntucve
CVE-2021-33833
2021-06-09 00:00:00
CVE-2022-23097
2022-01-28 00:00:00
CVE-2022-23098
2022-01-28 00:00:00
nvd
nvd
CVE-2021-33833
2021-06-09 18:15:08
CVE-2022-23096
2022-01-28 16:15:07
CVE-2022-23098
2022-01-28 16:15:07
cve
cve
CVE-2021-33833
2021-06-09 18:15:08
CVE-2022-23096
2022-01-28 16:15:07
CVE-2022-23098
2022-01-28 16:15:07
debiancve
debiancve
CVE-2021-33833
2021-06-09 18:15:08
CVE-2022-23097
2022-01-28 16:15:07
CVE-2022-23098
2022-01-28 16:15:07
cvelist
cvelist
CVE-2022-32293
2022-08-03 00:00:00
CVE-2021-33833
2021-06-09 17:44:52
CVE-2022-23096
2022-01-28 00:00:00
prion
prion
Out-of-bounds
2022-01-28 16:15:00
Stack overflow
2021-06-09 18:15:00
Out-of-bounds
2022-01-28 16:15:00
veracode
veracode
Buffer Overflow
2021-06-16 07:48:22
Denial Of Service (DoS)
2022-02-12 06:01:52
Denial Of Service (DoS)
2022-02-12 06:01:51
cnvd
cnvd
intel Connman Information Disclosure Vulnerability
2022-02-09 00:00:00
Intel Connman Information Disclosure Vulnerability (CNVD-2022-09128)
2022-02-09 00:00:00
alpinelinux
alpinelinux
CVE-2022-23096
2022-01-28 16:15:07
CVE-2022-23098
2022-01-28 16:15:07
CVE-2022-23097
2022-01-28 16:15:07
zdi
zdi
(Pwn2Own) ConnMan wispr_portal_web_result wp_object Double Free Remote Code Execution Vulnerability
2022-09-08 00:00:00
(Pwn2Own) ConnMan received_data Out-Of-Bounds Write Remote Code Execution Vulnerability
2022-09-08 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

JSON
Related for USN-6236-1
openvas18nessus16osv9gentoo2debian9redhatcve1mageia5suse5archlinux2ubuntucve9nvd9cve9debiancve9cvelist9prion9veracode9cnvd2alpinelinux8zdi2