CVE-2012-2322

Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of service (infinite loop and crash) via an invalid length value in a DHCP packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
connmanconnman
𝑥
≤ 0.84
connmanconnman
0.1
connmanconnman
0.2
connmanconnman
0.3
connmanconnman
0.4
connmanconnman
0.5
connmanconnman
0.6
connmanconnman
0.7
connmanconnman
0.8
connmanconnman
0.9
connmanconnman
0.10
connmanconnman
0.11
connmanconnman
0.12
connmanconnman
0.13
connmanconnman
0.14
connmanconnman
0.15
connmanconnman
0.16
connmanconnman
0.17
connmanconnman
0.18
connmanconnman
0.19
connmanconnman
0.20
connmanconnman
0.21
connmanconnman
0.22
connmanconnman
0.23
connmanconnman
0.24
connmanconnman
0.25
connmanconnman
0.26
connmanconnman
0.27
connmanconnman
0.28
connmanconnman
0.29
connmanconnman
0.30
connmanconnman
0.31
connmanconnman
0.32
connmanconnman
0.33
connmanconnman
0.34
connmanconnman
0.35
connmanconnman
0.36
connmanconnman
0.37
connmanconnman
0.38
connmanconnman
0.39
connmanconnman
0.40
connmanconnman
0.41
connmanconnman
0.42
connmanconnman
0.43
connmanconnman
0.44
connmanconnman
0.45
connmanconnman
0.46
connmanconnman
0.47
connmanconnman
0.48
connmanconnman
0.49
connmanconnman
0.50
connmanconnman
0.51
connmanconnman
0.52
connmanconnman
0.53
connmanconnman
0.54
connmanconnman
0.55
connmanconnman
0.56
connmanconnman
0.57
connmanconnman
0.58
connmanconnman
0.59
connmanconnman
0.60
connmanconnman
0.61
connmanconnman
0.62
connmanconnman
0.63
connmanconnman
0.64
connmanconnman
0.65
connmanconnman
0.66
connmanconnman
0.67
connmanconnman
0.68
connmanconnman
0.69
connmanconnman
0.70
connmanconnman
0.71
connmanconnman
0.72
connmanconnman
0.73
connmanconnman
0.74
connmanconnman
0.75
connmanconnman
0.76
connmanconnman
0.77
connmanconnman
0.78
connmanconnman
0.79
connmanconnman
0.80
connmanconnman
0.81
connmanconnman
0.82
connmanconnman
0.83
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
connman
bullseye (security)
1.36-2.2+deb11u2
fixed
bullseye
1.36-2.2+deb11u2
fixed
squeeze
not-affected
bookworm
1.41-3
fixed
sid
1.43-1
fixed
trixie
1.43-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
connman
zesty
not-affected
yakkety
ignored
xenial
not-affected
wily
ignored
vivid
ignored
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
lucid
ignored
hardy
dne
Common Weakness Enumeration
References
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commitdiff%3Bh=1d1a22fe586a455935483708fbe8eaeada79df7f
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81706
http://www.securityfocus.com/bid/53410
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75420
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commitdiff%3Bh=1d1a22fe586a455935483708fbe8eaeada79df7f
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81706
http://www.securityfocus.com/bid/53410
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75420