Upstream information
CVE-2022-32292 at MITRE
Description
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
Upstream Security Advisories:
SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
CVSS v3 Scores
| National Vulnerability Database |
Base Score | 9.8 |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | High |
Integrity Impact | High |
Availability Impact | High |
CVSSv3 Version | 3.1 |
SUSE Bugzilla entry:
1200189 [RESOLVED / FIXED]
SUSE Security Advisories:
List of released packages
Product(s) | Fixed package version(s) | References |
SUSE Package Hub 15 SP3 | connman >= 1.41-bp153.2.6.1
connman-client >= 1.41-bp153.2.6.1
connman-devel >= 1.41-bp153.2.6.1
connman-doc >= 1.41-bp153.2.6.1
connman-nmcompat >= 1.41-bp153.2.6.1
connman-plugin-hh2serial-gps >= 1.41-bp153.2.6.1
connman-plugin-iospm >= 1.41-bp153.2.6.1
connman-plugin-l2tp >= 1.41-bp153.2.6.1
connman-plugin-openvpn >= 1.41-bp153.2.6.1
connman-plugin-polkit >= 1.41-bp153.2.6.1
connman-plugin-pptp >= 1.41-bp153.2.6.1
connman-plugin-tist >= 1.41-bp153.2.6.1
connman-plugin-vpnc >= 1.41-bp153.2.6.1
connman-plugin-wireguard >= 1.41-bp153.2.6.1
connman-test >= 1.41-bp153.2.6.1
| Patchnames: openSUSE-2022-10134 |
SUSE Package Hub 15 SP4 | connman >= 1.41-bp154.2.3.1
connman-client >= 1.41-bp154.2.3.1
connman-devel >= 1.41-bp154.2.3.1
connman-doc >= 1.41-bp154.2.3.1
connman-nmcompat >= 1.41-bp154.2.3.1
connman-plugin-hh2serial-gps >= 1.41-bp154.2.3.1
connman-plugin-iospm >= 1.41-bp154.2.3.1
connman-plugin-l2tp >= 1.41-bp154.2.3.1
connman-plugin-openvpn >= 1.41-bp154.2.3.1
connman-plugin-polkit >= 1.41-bp154.2.3.1
connman-plugin-pptp >= 1.41-bp154.2.3.1
connman-plugin-tist >= 1.41-bp154.2.3.1
connman-plugin-vpnc >= 1.41-bp154.2.3.1
connman-plugin-wireguard >= 1.41-bp154.2.3.1
connman-test >= 1.41-bp154.2.3.1
| Patchnames: openSUSE-2022-10076 |
openSUSE Leap 15.3 | connman >= 1.41-bp153.2.6.1
connman-client >= 1.41-bp153.2.6.1
connman-devel >= 1.41-bp153.2.6.1
connman-doc >= 1.41-bp153.2.6.1
connman-nmcompat >= 1.41-bp153.2.6.1
connman-plugin-hh2serial-gps >= 1.41-bp153.2.6.1
connman-plugin-iospm >= 1.41-bp153.2.6.1
connman-plugin-l2tp >= 1.41-bp153.2.6.1
connman-plugin-openvpn >= 1.41-bp153.2.6.1
connman-plugin-polkit >= 1.41-bp153.2.6.1
connman-plugin-pptp >= 1.41-bp153.2.6.1
connman-plugin-tist >= 1.41-bp153.2.6.1
connman-plugin-vpnc >= 1.41-bp153.2.6.1
connman-plugin-wireguard >= 1.41-bp153.2.6.1
connman-test >= 1.41-bp153.2.6.1
| Patchnames: openSUSE-2022-10134 |
openSUSE Leap 15.4 | connman >= 1.41-bp154.2.3.1
connman-client >= 1.41-bp154.2.3.1
connman-devel >= 1.41-bp154.2.3.1
connman-doc >= 1.41-bp154.2.3.1
connman-nmcompat >= 1.41-bp154.2.3.1
connman-plugin-hh2serial-gps >= 1.41-bp154.2.3.1
connman-plugin-iospm >= 1.41-bp154.2.3.1
connman-plugin-l2tp >= 1.41-bp154.2.3.1
connman-plugin-openvpn >= 1.41-bp154.2.3.1
connman-plugin-polkit >= 1.41-bp154.2.3.1
connman-plugin-pptp >= 1.41-bp154.2.3.1
connman-plugin-tist >= 1.41-bp154.2.3.1
connman-plugin-vpnc >= 1.41-bp154.2.3.1
connman-plugin-wireguard >= 1.41-bp154.2.3.1
connman-test >= 1.41-bp154.2.3.1
| Patchnames: openSUSE-2022-10076 |
openSUSE Tumbleweed | connman >= 1.41-4.1
connman-client >= 1.41-4.1
connman-devel >= 1.41-4.1
connman-doc >= 1.41-4.1
connman-nmcompat >= 1.41-4.1
connman-plugin-hh2serial-gps >= 1.41-4.1
connman-plugin-iospm >= 1.41-4.1
connman-plugin-l2tp >= 1.41-4.1
connman-plugin-openconnect >= 1.41-4.1
connman-plugin-openvpn >= 1.41-4.1
connman-plugin-polkit >= 1.41-4.1
connman-plugin-pptp >= 1.41-4.1
connman-plugin-tist >= 1.41-4.1
connman-plugin-vpnc >= 1.41-4.1
connman-plugin-wireguard >= 1.41-4.1
connman-test >= 1.41-4.1
| Patchnames: openSUSE-Tumbleweed-2024-12221 |
SUSE Timeline for this CVE
CVE page created: Fri Jun 3 09:30:09 2022
CVE page last modified: Tue Sep 3 19:26:01 2024