CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP requests t ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne).
Description
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 10 | connman | 1.36-2.1~deb10u3 |
| debian 11 | connman | 1.36-2.2+deb11u1 |
| debian 12 | connman | 1.41-2 |
| debian 13 | connman | 1.41-2 |
| debian 14 | connman | 1.41-2 |
| echo | connman | 1.41-2 |
| rapidfort ubuntu 20.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 22.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 24.04 | connman | 0:1.36-2.3ubuntu0.1 |
| ubuntu 16.04-ESM | connman | 1.21-1.2+deb8u1ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | connman | 1.35-6ubuntu0.1~esm1 |
| ubuntu 20.04 | connman | 1.36-2ubuntu0.1 |
Afficher les 14 entrées de 14 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 10 | connman | 1.36-2.1~deb10u3 |
| debian 11 | connman | 1.36-2.2+deb11u1 |
| debian 12 | connman | 1.41-2 |
| debian 13 | connman | 1.41-2 |
| debian 14 | connman | 1.41-2 |
| echo | connman | 1.41-2 |
| rapidfort ubuntu 20.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 22.04 | connman | 0:1.36-2.3ubuntu0.1 |
| rapidfort ubuntu 24.04 | connman | 0:1.36-2.3ubuntu0.1 |
| ubuntu 16.04-ESM | connman | 1.21-1.2+deb8u1ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | connman | 1.35-6ubuntu0.1~esm1 |
| ubuntu 20.04 | connman | 1.36-2ubuntu0.1 |
| ubuntu 20.04-ESM | connman | 1.36-2ubuntu0.1 |
| ubuntu 22.04 | connman | 1.36-2.3ubuntu0.1 |