Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-36953

Malicious code in bioql PyPI...

8.1CVSS6.3AI score0.00134EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9924

Malicious code in bioql PyPI...

4.8CVSS4.8AI score0.00194EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/04/07 12:21 a.m.16 views

CVE-2025-32366

A flaw was found in ConnMan's DNS proxy component. This vulnerability allows an attacker to cause a buffer overread or memory corruption via a crafted DNS response due to improper validation of the RDLENGTH field before using it in a memcpy operation. Mitigation Mitigation for this issue is eithe...

3.7CVSS4.2AI score0.00194EPSS
Exploits0References5
NVD
NVD
added 2025/04/05 11:15 p.m.11 views

CVE-2025-32366

In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohsrr-rdlen and memcpyresponse+offset,end,rdlen without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining...

4.8CVSS0.00194EPSS
Exploits0References4
OSV
OSV
added 2025/04/05 11:15 p.m.10 views

CVE-2025-32366

In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohsrr-rdlen and memcpyresponse+offset,end,rdlen without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining...

4.6AI score
Exploits0References4
CNNVD
CNNVD
added 2025/04/05 12:0 a.m.2 views

ConnMan 安全漏洞

ConnMan is an Aldebaran open source connection manager. A security vulnerability exists in ConnMan 1.44 and earlier versions, which stems from a memcpy length dependency on the RR RDLENGTH value...

4.8CVSS4.7AI score0.00194EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/04/05 12:0 a.m.5 views

CVE-2025-32366

In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohsrr-rdlen and memcpyresponse+offset,end,rdlen without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining...

4.8CVSS4.7AI score0.00194EPSS
Exploits0References4
CVE
CVE
added 2025/04/05 12:0 a.m.73 views

CVE-2025-32366

In ConnMan up to version 1.44, the DNS proxy code path parse_rr in dnsproxy.c uses a memcpy length derived from an RR RDLENGTH (rdlen) value without validating that end+rdlen stays within the remaining packet data. Specifically, rdlen is computed as ntohs(rr->rdlen) and memcpy(response+offset,...

4.8CVSS4.6AI score0.00194EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/04/05 12:0 a.m.11 views

CVE-2025-32366

In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohsrr-rdlen and memcpyresponse+offset,end,rdlen without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining...

4.8CVSS4.9AI score0.00194EPSS
Exploits0
OSV
OSV
added 2023/12/18 10:15 a.m.1 views

DEBIAN-CVE-2023-32726

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server...

8.1CVSS6.4AI score0.00134EPSS
Exploits0References1
OSV
OSV
added 2023/12/18 10:15 a.m.0 views

UBUNTU-CVE-2023-32726

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server...

8.1CVSS6AI score0.00134EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/12/18 10:15 a.m.24 views

CVE-2023-32726

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server...

8.1CVSS6.7AI score0.00134EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/12/18 9:17 a.m.20 views

CVE-2023-32726 Possible buffer overread from reading DNS responses

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server...

3.9CVSS8.4AI score0.00134EPSS
Exploits0References4
Prion
Prion
added 2021/06/09 6:15 p.m.15 views

Stack overflow

ConnMan aka Connection Manager 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH for A or AAAA...

7.5CVSS9.6AI score0.00155EPSS
Exploits1References5Affected Software2
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.3 views

ConnMan 缓冲区错误漏洞

Arch Linux ConnMan 1.39 is an application from the Arch Linux community in the United States. It provides Intel's modular network connection manager. A buffer error vulnerability exists in ConnMan that stems from a stack-based buffer overflow when ConnMan is unpacked via NAME, RDATA, or RDLENGTH ...

9.8CVSS8.6AI score0.00155EPSS
Exploits1References11
Rows per page
Query Builder