336 matches found
Information disclosure
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
UBUNTU-CVE-2022-23097
An issue was discovered in the DNS proxy in Connman through 1.40. forwarddnsreply mishandles a strnlen call, leading to an out-of-bounds read...
CVE-2022-23098
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...
Connman 缓冲区错误漏洞
Connman is a connection manager. A security vulnerability exists in Connman's DNS proxy that stems from forwarddnsreply mishandling strnlen calls, resulting in out-of-bounds reads. No details of the vulnerability are provided at this time...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
Connman 缓冲区错误漏洞
Connman is a connection manager. A security vulnerability exists in Connman's DNS proxy that stems from a lack of checking by the TCP server reply implementation for the presence of sufficient Header Data to cause an out-of-bounds read...
CVE-2022-23097
ConnMan’s DNS proxy (forward_dns_reply) mishandles a strnlen call, causing an out-of-bounds read through version 1.40. Impact can include crashes or memory exposure; multiple advisories reference CVE-2022-23097. Remediation across sources varies by distro, but generally requires upgrading ConnMan...
CVE-2022-23098
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...
Mageia: Security Advisory (MGASA-2021-0331)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0036)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
CVE-2022-23098
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
CVE-2022-23097
An issue was discovered in the DNS proxy in Connman through 1.40. forwarddnsreply mishandles a strnlen call, leading to an out-of-bounds read...
CVE-2022-23096
ConnMan (DNS proxy) up to version 1.40 contains CVE-2022-23096: TCP server reply path lacks sufficient Header Data checks, enabling out-of-bounds reads. This could lead to denial of service or arbitrary code execution depending on the advisory. >= ConnMan 1.42 (or latest security-patched build...
Mageia: Security Advisory (MGASA-2021-0195)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...