SB2023103107 - Gentoo update for ConnMan
Published: October 31, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Out-of-bounds read (CVE-ID: CVE-2022-23096)
The vulnerability allows a remote attacker to gain access to potentially sensitive information or perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the DNS proxy dnsproxy.c when handling Header Data in DNS responses. A remote attacker can send specially crafted TCP packets to the affected software, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
2) Out-of-bounds read (CVE-ID: CVE-2022-23097)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the forward_dns_reply() function in the DNS proxy. A remote attacker can send specially crafted TCP packets to the application, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
3) Infinite loop (CVE-ID: CVE-2022-23098)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop when handling TCP connections. A remote attacker can send specially crafted packets to the application, consume all available system resources and cause denial of service conditions.
4) Out-of-bounds write (CVE-ID: CVE-2022-32292)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error within the received_data method. A remote attacker on the local network can trigger out-of-bounds write and execute arbitrary code on the target system.
5) Double Free (CVE-ID: CVE-2022-32293)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the wispr_portal_web_result method. A remote attacker on the local network can pass specially crafted data to the application, trigger double free error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.