Published: 09/06/2021 Updated: 09/02/2022

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

ConnMan (aka Connection Manager) 1.30 up to and including 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA).

Vulnerable Product	Search on Vulmon	Subscribe to Product
intel connection manager
debian debian linux 9.0

Debian Bug report logs - #989662 connman: CVE-2021-33833: dnsproxy: Check the length of buffers before memcpy Package: src:connman; Maintainer for src:connman is Alexander Sack <asac@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 9 Jun 2021 17:21:02 UTC Severity: grave Tags: patch, pen ...

A security issue has been found in the dnsproxy component in releases 132 to 139 of connman Unpacking of NAME and RDATA/RDLENGTH fields with TYPE A/AAAA in the uncompress function uses a memcpy with insufficient bounds checking, which can overflow a stack buffer ...

oss-sec mailing list archives   By Date By Thread </form>    connman stack buffer overflow in dnsproxy CVE-2021-33833   From: Marcus M ...

🔓 Vulnerability Research and Proof of Concept exploits for ConnMan

ConnMan ConnMan is an internet connection manager for embedded devices running the Linux operating system git - gitkernelorg/pub/scm/network/connman/connmangit/ CVE ID Score Description CVE-2021-33833 98 CRITICAL ConnMan (aka Connection Manager) 130 through 139 has a stack-based buffer overflow in uncompress in dnsproxyc via NAME, RDATA, or RDLENGTH (for

CWE-787 http://www.openwall.com/lists/oss-security/2021/06/09/1 https://lore.kernel.org/connman/https://security.gentoo.org/glsa/202107-29 http://www.openwall.com/lists/oss-security/2022/01/25/1 https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989662 https://nvd.nist.gov https://github.com/merrychap/POC-connman https://security.archlinux.org/CVE-2021-33833

CVE-2021-33833

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect