Known vulnerabilities in ConnMan

Vendor: kernel.org
Software: ConnMan
Software CPE: cpe:2.3:a:kernel_org:connman:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ConnMan ConnMan is affected by 13 known vulnerabilities: 2 high, 10 medium, 1 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75171 - Stack-based buffer overflow
CVE-2023-28488
CWE-121 Medium
No
No
1.42 17.04.2023 SB2023041720
SB2023053101
SB2023071926
#VU67467 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23098
CWE-835 Medium
No
No
1.41 19.09.2022 SB2022091913
SB2022091914
SB2023071926
and 1 more
#VU67466 - Out-of-bounds read
CVE-2022-23097
CWE-125 Medium
No
No
1.41 19.09.2022 SB2022091913
SB2022091914
SB2023071926
and 1 more
#VU67465 - Out-of-bounds read
CVE-2022-23096
CWE-125 Medium
No
No
1.41 19.09.2022 SB2022091913
SB2022091914
SB2023071926
and 1 more
#VU67410 - Double Free
CVE-2022-32293
CWE-415 Medium
No
No
- 15.09.2022 SB2022091527
SB2022091914
SB2023071926
and 1 more
#VU67397 - Out-of-bounds write
CVE-2022-32292
CWE-787 Medium
No
No
- 15.09.2022 SB2022091527
SB2022091914
SB2023071926
and 1 more
#VU53998 - Stack-based buffer overflow
CVE-2021-33833
CWE-121 Medium
No
No
1.40 09.06.2021 SB2021060949
SB2021061624
SB2021071202
and 1 more
#VU50671 - Exposure of sensitive information to an unauthorized actor
CVE-2012-6459
CWE-200 Low
No
No
1.4 12.02.2021 SB2013010102
#VU50670 - Stack-based buffer overflow
CVE-2021-26675
CWE-121 High
No
No
1.39 12.02.2021 SB2021021208
SB2021021209
SB2021021408
and 2 more
#VU50669 - Missing release of memory after effective lifetime
CVE-2021-26676
CWE-401 Medium
No
No
1.39 12.02.2021 SB2021021208
SB2021021209
SB2021021408
and 2 more
#VU44064 - Permissions, Privileges, and Access Controls
CVE-2012-2320
CWE-264 Medium
No
No
- 19.05.2012 SB2012051901
SB2012051507
#VU44065 - Improper input validation
CVE-2012-2321
CWE-20 High
No
No
- 19.05.2012 SB2012051901
SB2012051507
#VU44066 - Improper input validation
CVE-2012-2322
CWE-20 Medium
No
No
- 19.05.2012 SB2012051901
SB2012051507