CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media).
Descripción
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.16 | connman | 1.41-r0 |
| alpine 3.17 | connman | 1.41-r0 |
| alpine 3.18 | connman | 1.41-r0 |
| alpine 3.19 | connman | 1.41-r0 |
| alpine 3.20 | connman | 1.41-r0 |
| alpine 3.21 | connman | 1.41-r0 |
| alpine 3.22 | connman | 1.41-r0 |
| alpine 3.23 | connman | 1.41-r0 |
| alpine 3.24 | connman | 1.41-r0 |
| alpine edge | connman | 1.41-r0 |
| debian 10 | connman | 1.36-2.1~deb10u4 |
| debian 11 | connman | 1.36-2.2+deb11u1 |
Mostrar las 25 entradas de 25 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.16 | connman | 1.41-r0 |
| alpine 3.17 | connman | 1.41-r0 |
| alpine 3.18 | connman | 1.41-r0 |
| alpine 3.19 | connman | 1.41-r0 |
| alpine 3.20 | connman | 1.41-r0 |
| alpine 3.21 | connman | 1.41-r0 |
| alpine 3.22 | connman | 1.41-r0 |
| alpine 3.23 | connman | 1.41-r0 |
| alpine 3.24 | connman | 1.41-r0 |
| alpine edge | connman | 1.41-r0 |
| debian 10 | connman | 1.36-2.1~deb10u4 |
| debian 11 | connman | 1.36-2.2+deb11u1 |
| debian 12 | connman | 1.36-2.4 |
| debian 13 | connman | 1.36-2.4 |
| debian 14 | connman | 1.36-2.4 |
| debian 9 | connman | 1.33-3+deb9u3 |
| echo | connman | 1.36-2.4 |
| rapidfort ubuntu 20.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 22.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 24.04 | connman | 0:1.36-2.3ubuntu0.1 |
| ubuntu 16.04-ESM | connman | 1.21-1.2+deb8u1ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | connman | 1.35-6ubuntu0.1~esm1 |
| ubuntu 20.04 | connman | 1.36-2ubuntu0.1 |
| ubuntu 20.04-ESM | connman | 1.36-2ubuntu0.1 |
| ubuntu 22.04 | connman | 1.36-2.3ubuntu0.1 |
Referencias
- https://git.kernel.org/pub/scm/network/connman/connman.git/log/
- https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
- https://security.gentoo.org/glsa/202310-21
- https://ubuntu.com/security/notices/USN-6236-1
- https://www.cve.org/CVERecord?id=CVE-2022-23096
- https://www.debian.org/security/2022/dsa-5231
- https://www.openwall.com/lists/oss-security/2022/01/25/1