CVE-2012-2320

EUVD-2012-2313
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
connmanconnman
𝑥
≤ 0.84
connmanconnman
0.1
connmanconnman
0.2
connmanconnman
0.3
connmanconnman
0.4
connmanconnman
0.5
connmanconnman
0.6
connmanconnman
0.7
connmanconnman
0.8
connmanconnman
0.9
connmanconnman
0.10
connmanconnman
0.11
connmanconnman
0.12
connmanconnman
0.13
connmanconnman
0.14
connmanconnman
0.15
connmanconnman
0.16
connmanconnman
0.17
connmanconnman
0.18
connmanconnman
0.19
connmanconnman
0.20
connmanconnman
0.21
connmanconnman
0.22
connmanconnman
0.23
connmanconnman
0.24
connmanconnman
0.25
connmanconnman
0.26
connmanconnman
0.27
connmanconnman
0.28
connmanconnman
0.29
connmanconnman
0.30
connmanconnman
0.31
connmanconnman
0.32
connmanconnman
0.33
connmanconnman
0.34
connmanconnman
0.35
connmanconnman
0.36
connmanconnman
0.37
connmanconnman
0.38
connmanconnman
0.39
connmanconnman
0.40
connmanconnman
0.41
connmanconnman
0.42
connmanconnman
0.43
connmanconnman
0.44
connmanconnman
0.45
connmanconnman
0.46
connmanconnman
0.47
connmanconnman
0.48
connmanconnman
0.49
connmanconnman
0.50
connmanconnman
0.51
connmanconnman
0.52
connmanconnman
0.53
connmanconnman
0.54
connmanconnman
0.55
connmanconnman
0.56
connmanconnman
0.57
connmanconnman
0.58
connmanconnman
0.59
connmanconnman
0.60
connmanconnman
0.61
connmanconnman
0.62
connmanconnman
0.63
connmanconnman
0.64
connmanconnman
0.65
connmanconnman
0.66
connmanconnman
0.67
connmanconnman
0.68
connmanconnman
0.69
connmanconnman
0.70
connmanconnman
0.71
connmanconnman
0.72
connmanconnman
0.73
connmanconnman
0.74
connmanconnman
0.75
connmanconnman
0.76
connmanconnman
0.77
connmanconnman
0.78
connmanconnman
0.79
connmanconnman
0.80
connmanconnman
0.81
connmanconnman
0.82
connmanconnman
0.83
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
connman
bookworm
1.41-3
fixed
bullseye
1.36-2.2+deb11u2
fixed
bullseye (security)
1.36-2.2+deb11u2
fixed
sid
1.43-1
fixed
squeeze
no-dsa
trixie
1.43-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
connman
hardy
dne
lucid
ignored
natty
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
ignored
zesty
not-affected
Common Weakness Enumeration
References
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=c1b968984212b46bea1330f5ae029507b9bfded9
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81704
http://www.securityfocus.com/bid/53406
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75465
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=c1b968984212b46bea1330f5ae029507b9bfded9
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81704
http://www.securityfocus.com/bid/53406
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75465