net-misc/connman-1.43 — Security Advisories

▸ GLSA 202310-21 ConnMan: Multiple Vulnerabilities this version unaffected high remote 2023-10-31

Multiple vulnerabilities have been discovered in ConnMan, the worst of which can lead to remote code execution.

Announced: 2023-10-31
Revised: 2023-10-31
Access: remote
Bugs: #832028 #863425
Advisory: https://security.gentoo.org/glsa/202310-21

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/connman	*	< 1.42_pre20220801	>= 1.42_pre20220801

Background

ConnMan provides a daemon for managing Internet connections.

Description

Multiple vulnerabilities have been discovered in ConnMan. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All ConnMan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/connman-1.42_pre20220801"

References

▸ GLSA 202107-29 ConnMan: Multiple vulnerabilities this version unaffected normal remote 2021-07-12

A buffer overflow in ConnMan might allow remote attacker(s) to execute arbitrary code.

Announced: 2021-07-12
Revised: 2021-07-12
Access: remote
Bugs: #769491 #795084
Advisory: https://security.gentoo.org/glsa/202107-29

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/connman	*	< 1.40	>= 1.40

Background

ConnMan provides a daemon for managing Internet connections.

Description

Multiple vulnerabilities have been discovered in connman. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All ConnMan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/connman-1.40"

References

▸ GLSA 201812-02 ConnMan: Multiple vulnerabilities this version unaffected normal remote 2018-12-02

Multiple vulnerabilities have been found in ConnMan, the worst of which could result in the remote execution of code.

Announced: 2018-12-02
Revised: 2018-12-02
Access: remote
Bugs: #628566 #630028
Advisory: https://security.gentoo.org/glsa/201812-02

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/connman	*	< 1.35-r1	>= 1.35-r1

Background

ConnMan provides a daemon for managing Internet connections.

Description

Multiple vulnerabilities have been discovered in ConnMan. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, via a crafted DNS packet, could remotely execute code or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All ConnMan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/connman-1.35-r1"

References

▸ GLSA 201205-02 ConnMan: Multiple vulnerabilities this version unaffected normal remote 2012-05-15

Multiple vulnerabilities have been found in ConnMan, allowing attackers to execute arbitrary code or cause Denial of Service.

Announced: 2012-05-15
Revised: 2012-05-15
Access: remote
Bugs: #415415
Advisory: https://security.gentoo.org/glsa/201205-02

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/connman	*	< 1.0-r1	>= 1.0-r1

Background

ConnMan provides a daemon for managing Internet connections.

Description

Multiple vulnerabilities have been found in ConnMan:

Errors in inet.c and rtnl.c prevent ConnMan from checking the origin of netlink messages (CVE-2012-2320).
ConnMan does not properly check for shell escapes when requesting a hostname via DHCP (CVE-2012-2321).
An infinite loop error exists in client.c (CVE-2012-2322).

Impact

A remote attacker could execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All ConnMan users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/connman-1.0-r1"