Out-of-bounds read in ConnMan - CVE-2022-23096
Published: September 19, 2022
Vulnerability identifier: #VU67465
CSH Severity: Medium
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-23096
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information or perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the DNS proxy dnsproxy.c when handling Header Data in DNS responses. A remote attacker can send specially crafted TCP packets to the affected software, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
Affected software
ConnMan
Debian Linux
Gentoo Linux
Ubuntu
connman (Ubuntu package)
connman (Debian package)
Debian Linux
Gentoo Linux
Ubuntu
connman (Ubuntu package)
connman (Debian package)
How to mitigate CVE-2022-23096
Install updates from vendor's website.
ConnMan - update to 1.41
connman (Ubuntu package) - addressed in versions Ubuntu Pro, 1.36-2ubuntu0.1, 1.36-2.3ubuntu0.1, 1.41-2ubuntu0.23.04.1
connman (Debian package) - update to 1.36-2.2+deb11u1
connman (Ubuntu package) - addressed in versions Ubuntu Pro, 1.36-2ubuntu0.1, 1.36-2.3ubuntu0.1, 1.41-2ubuntu0.23.04.1
connman (Debian package) - update to 1.36-2.2+deb11u1