SB2023071926 - Ubuntu update for connman
Published: July 19, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 9 secuirty vulnerabilities.
1) Stack-based buffer overflow (CVE-ID: CVE-2021-26675)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within dnsproxy in ConnMan. A remote unauthenticated attacker on the local network can send specially crafted packets to the affected system, trigger a stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Memory leak (CVE-ID: CVE-2021-26676)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due memory leak in gdhcp in ConnMan. A remote attacker on the local network can force the application to leak sensitive stack information.
3) Stack-based buffer overflow (CVE-ID: CVE-2021-33833)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the dnsproxy component in the uncompress function when unpacking NAME and RDATA/RDLENGTH fields with TYPE A/AAAA. A remote attacker can send specially crafted DNS packet to the ConnMan and perform a denial of service (DoS) attack.
4) Out-of-bounds read (CVE-ID: CVE-2022-23096)
The vulnerability allows a remote attacker to gain access to potentially sensitive information or perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the DNS proxy dnsproxy.c when handling Header Data in DNS responses. A remote attacker can send specially crafted TCP packets to the affected software, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
5) Out-of-bounds read (CVE-ID: CVE-2022-23097)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the forward_dns_reply() function in the DNS proxy. A remote attacker can send specially crafted TCP packets to the application, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
6) Infinite loop (CVE-ID: CVE-2022-23098)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop when handling TCP connections. A remote attacker can send specially crafted packets to the application, consume all available system resources and cause denial of service conditions.
7) Out-of-bounds write (CVE-ID: CVE-2022-32292)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error within the received_data method. A remote attacker on the local network can trigger out-of-bounds write and execute arbitrary code on the target system.
8) Double Free (CVE-ID: CVE-2022-32293)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the wispr_portal_web_result method. A remote attacker on the local network can pass specially crafted data to the application, trigger double free error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
9) Stack-based buffer overflow (CVE-ID: CVE-2023-28488)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the listener_event function in the ./gdhcp/client.c. A remote unauthenticated attacker can trigger stack-based buffer overflow and cause a denial of service condition on the target system.
Remediation
Install update from vendor's website.