CVE-2021-26675: A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code

High severity · published Feb 9, 2021

CVE-2021-26675

A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code

8.8

CVSS

1.3%

EPSS

On KEV

Description

A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Adjacent

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.3% · higher than 70% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Connman · Intel

before 1.39 · source: NVD

Debian Linux · Debian

9.0; 10.0 · source: NVD

Leap · Opensuse

15.2 · source: NVD

Affected product

Debian Linux

Debian

All Debian Linux CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-26675

CVE.org

https://www.cve.org/CVERecord?id=CVE-2021-26675

Issue Tracking

https://bugzilla.suse.com/show_bug.cgi?id=1181751

Patch

https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=e4079a20f617a4b076af503f6e4e8b0304c9f2cb

Release Notes

https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog

Technical Description

https://kunnamon.io/tbone/

Mailing List

https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html

Third Party Advisory

https://security.gentoo.org/glsa/202107-29