client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0370-1 advisory.

  - client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted     DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman     process. (CVE-2023-28488)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0369-1 advisory.

  - client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted     DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman     process. (CVE-2023-28488)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6236-1 advisory.

    It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use     this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-26675, CVE-2021-33833)

    It was discovered that ConnMan could be made to leak sensitive information via the gdhcp component. A     remote attacker could possibly use this issue to obtain information for further exploitation. This issue     only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-26676)

    It was discovered that ConnMan could be made to read out of bounds. A remote attacker could possibly use     this issue to case ConnMan to crash, resulting in a denial of service. This issue only affected Ubuntu     16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-23096, CVE-2022-23097)

    It was discovered that ConnMan could be made to run into an infinite loop. A remote attacker could     possibly use this issue to cause ConnMan to consume resources and to stop operating, resulting in a denial     of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu     22.04 LTS. (CVE-2022-23098)

    It was discovered that ConnMan could be made to write out of bounds via the gweb component. A remote     attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04     LTS, and Ubuntu 22.04 LTS. (CVE-2022-32292)

    It was discovered that ConnMan did not properly manage memory under certain circumstances. A remote     attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04     LTS, and Ubuntu 22.04 LTS. (CVE-2022-32293)

    It was discovered that ConnMan could be made to write out of bounds via the gdhcp component. A remote     attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2023-28488)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5416 advisory.

  - client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted     DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman     process. (CVE-2023-28488)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3397 advisory.

  - client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted     DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman     process. (CVE-2023-28488)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
185713	openSUSE 15 Security Update : connman (openSUSE-SU-2023:0370-1)	Nessus	SuSE Local Security Checks	medium
185712	openSUSE 15 Security Update : connman (openSUSE-SU-2023:0369-1)	Nessus	SuSE Local Security Checks	medium
178482	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : ConnMan vulnerabilities (USN-6236-1)	Nessus	Ubuntu Local Security Checks	critical
176497	Debian DSA-5416-1 : connman - security update	Nessus	Debian Local Security Checks	medium
174700	Debian DLA-3397-1 : connman - LTS security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2023-28488

medium

Tenable Plugins

medium

medium

critical

medium

medium