CVE-2022-23097
An issue was discovered in the DNS proxy in Connman through 1.40. forw ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media).
Descripción
An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.16 | connman | 1.41-r0 |
| alpine 3.17 | connman | 1.41-r0 |
| alpine 3.18 | connman | 1.41-r0 |
| alpine 3.19 | connman | 1.41-r0 |
| alpine 3.20 | connman | 1.41-r0 |
| alpine 3.21 | connman | 1.41-r0 |
| alpine 3.22 | connman | 1.41-r0 |
| alpine 3.23 | connman | 1.41-r0 |
| alpine 3.24 | connman | 1.41-r0 |
| alpine edge | connman | 1.41-r0 |
| debian 10 | connman | 1.36-2.1~deb10u4 |
| debian 11 | connman | 1.36-2.2+deb11u1 |
Mostrar las 25 entradas de 25 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.16 | connman | 1.41-r0 |
| alpine 3.17 | connman | 1.41-r0 |
| alpine 3.18 | connman | 1.41-r0 |
| alpine 3.19 | connman | 1.41-r0 |
| alpine 3.20 | connman | 1.41-r0 |
| alpine 3.21 | connman | 1.41-r0 |
| alpine 3.22 | connman | 1.41-r0 |
| alpine 3.23 | connman | 1.41-r0 |
| alpine 3.24 | connman | 1.41-r0 |
| alpine edge | connman | 1.41-r0 |
| debian 10 | connman | 1.36-2.1~deb10u4 |
| debian 11 | connman | 1.36-2.2+deb11u1 |
| debian 12 | connman | 1.36-2.4 |
| debian 13 | connman | 1.36-2.4 |
| debian 14 | connman | 1.36-2.4 |
| debian 9 | connman | 1.33-3+deb9u3 |
| echo | connman | 1.36-2.4 |
| rapidfort ubuntu 20.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 22.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 24.04 | connman | 0:1.36-2.3ubuntu0.1 |
| ubuntu 16.04-ESM | connman | 1.21-1.2+deb8u1ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | connman | 1.35-6ubuntu0.1~esm1 |
| ubuntu 20.04 | connman | 1.36-2ubuntu0.1 |
| ubuntu 20.04-ESM | connman | 1.36-2ubuntu0.1 |
| ubuntu 22.04 | connman | 1.36-2.3ubuntu0.1 |
Referencias
- https://git.kernel.org/pub/scm/network/connman/connman.git/log/
- https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
- https://security.gentoo.org/glsa/202310-21
- https://ubuntu.com/security/notices/USN-6236-1
- https://www.cve.org/CVERecord?id=CVE-2022-23097
- https://www.debian.org/security/2022/dsa-5231
- https://www.openwall.com/lists/oss-security/2022/01/25/1