Login Request a demo
CO
Product
Connman
by Intel · last CVE Apr 12, 2023
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 4High 3Medium 2Low 0
Severity
All severities10Critical4High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Connman to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-32292
9.8
3%
Aug 3
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code
Affected: through 1.41
CVE-2017-12865
9.8
6%
Aug 29
Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted…
Affected: through 1.34
CVE-2022-23097
9.1
2%
Jan 28
An issue was discovered in the DNS proxy in Connman through 1.40
Affected: through 1.40
CVE-2022-23096
9.1
3%
Jan 28
An issue was discovered in the DNS proxy in Connman through 1.40
Affected: through 1.40
CVE-2021-26675
8.8
1%
Feb 9
A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code
Affected: before 1.39
CVE-2022-32293
8.1
2%
Aug 3
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution
Affected: through 1.41
CVE-2022-23098
7.5
2%
Jan 28
An issue was discovered in the DNS proxy in Connman through 1.40
Affected: through 1.40
CVE-2023-28488
6.5
1%
Apr 12
client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of…
Affected: 0.55 through 1.41
CVE-2021-26676
6.5
1%
Feb 9
gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp
Affected: before 1.39
CVE-2012-6459
–
1%
Jan 1
ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth…
Affected: 1.3
Showing 10