Out-of-bounds read in ConnMan - CVE-2022-23097
Published: September 19, 2022
Vulnerability identifier: #VU67466
CSH Severity: Medium
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-23097
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the forward_dns_reply() function in the DNS proxy. A remote attacker can send specially crafted TCP packets to the application, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
Affected software
ConnMan
Debian Linux
Gentoo Linux
Ubuntu
connman (Ubuntu package)
connman (Debian package)
Debian Linux
Gentoo Linux
Ubuntu
connman (Ubuntu package)
connman (Debian package)
How to mitigate CVE-2022-23097
Install updates from vendor's website.
ConnMan - update to 1.41
connman (Ubuntu package) - addressed in versions Ubuntu Pro, 1.36-2ubuntu0.1, 1.36-2.3ubuntu0.1, 1.41-2ubuntu0.23.04.1
connman (Debian package) - update to 1.36-2.2+deb11u1
connman (Ubuntu package) - addressed in versions Ubuntu Pro, 1.36-2ubuntu0.1, 1.36-2.3ubuntu0.1, 1.41-2ubuntu0.23.04.1
connman (Debian package) - update to 1.36-2.2+deb11u1