Arbitrary Code Execution

connman is vulnerable to arbitrary code execution. The vulnerability exists through a stack buffer overflow that can be used to execute code by network adjacent attackers...

Arbitrary Code Execution

connman is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow in dnsproxy in ConnMan...

ConnMan Buffer Error Vulnerability

Arch Linux ConnMan 1.39 is an application from the Arch Linux community in the United States. It provides Intel's Modular Network Connection Manager. A buffer error vulnerability exists in versions prior to ConnMan 1.39, which can be exploited to cause remote code execution...

ConnMan 1.39 Information Leakage Vulnerability

Arch Linux ConnMan 1.39 is an application from the Arch Linux community in the United States. It provides Intel's modular network connection manager. An information leakage vulnerability exists in versions prior to ConnMan 1.39, which stems from the gdhcp feature that can lead to leakage of stack...

DLA-2552-1 connman - security update

Bulletin has no description...

[SECURITY] [DSA 4847-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4847-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 08, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4847-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4847-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 08, 2021 https://www.debian.org/security/faq -...

PT-2021-2219 · Connman +5 · Connman +5

Name of the Vulnerable Software and Affected Versions: ConnMan versions prior to 1.39 Description: A stack-based buffer overflow in the dnsproxy component of ConnMan could be used by network adjacent attackers to execute code. This issue allows a remote attacker to potentially execute arbitrary...

DSA-4847-1 connman - security update

Bulletin has no description...

GLSA-201812-02 : ConnMan: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201812-02 ConnMan: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ConnMan. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, via a crafted DNS packet, could...

ConnMan: Multiple vulnerabilities

Background ConnMan provides a daemon for managing Internet connections. Description Multiple vulnerabilities have been discovered in ConnMan. Please review the CVE identifiers referenced below for details. Impact A remote attacker, via a crafted DNS packet, could remotely execute code or cause a...

Debian: Security Advisory (DLA-1078-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2018-0036 Updated connman packages fix security vulnerability

Security consultants in NRI Secure Technologies discovered a stack overflow vulnerability in ConnMan. An attacker with control of the DNS responses to the DNS proxy in ConnMan might crash the service and, in same cases, remotely execute arbitrary commands in the host running the service...

Updated connman packages fix security vulnerability

Security consultants in NRI Secure Technologies discovered a stack overflow vulnerability in ConnMan. An attacker with control of the DNS responses to the DNS proxy in ConnMan might crash the service and, in same cases, remotely execute arbitrary commands in the host running the service...

The vulnerability of the Connman connection manager (“dnsproxy.c”) allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Connman connection manager “dnsproxy.c” is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code using a specially created text string in the response to a query that includes th...

connman 'src/dnsproxy.c' stack buffer overflow vulnerability

connman is a software that uses d-bus as an inter-process communication mechanism to manage linux network links. A stack buffer overflow vulnerability exists in connman 'src/dnsproxy.c'. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application....

Intel ConnMan Project connection manager daemon buffer overflow vulnerability

Intel ConnMan Project connection manager daemon is an Internet connection manager from Intel Corporation USA for managing Internet connections in embedded devices. A buffer overflow vulnerability exists in Intel ConnMan Project connection manager daemon version 1.34 and earlier. A remote attacker...

Debian DLA-1078-1 : connman security update

In connman, stack-based buffer overflow in 'dnsproxy.c' allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted response query string passed to the 'name' variable. For Debian 7 'Wheezy', these problems have been fixed in version 1.0-1.1+wheezy2. We...

[SECURITY] [DLA 1078-1] connman security update

Package : connman Version : 1.0-1.1+wheezy2 CVE ID : CVE-2017-12865 Debian Bug : 872844 In connman, stack-based buffer overflow in "dnsproxy.c" allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted response query string passed to the "name" variable. F...

DLA-1078-1 connman - security update

Bulletin has no description...