Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian LTS DLA-3397-1: Fix for Connman Denial of Service Vulnerability

debian lts
Calendar Grey April 21, 2023
Dist Debian Esm H88
Uncover the vital connman security patch in Debian LTS Advisory DLA-3397-2 that resolves a denial of service vulnerability.
It was discovered that there was a potential denial of service vulnerabilty in connman, a command-line network manager designed for use on embedded devices
Topics%20covered

Topics Covered

security advisory denial of service Debian network management connman

Summary

Network-adjacent attackers operating a crafted DHCP server could have
caused a stack-based buffer overflow, resulting in a denial of
service through terminating the connman process.

For Debian 10 buster, this problem has been fixed in version
1.36-2.1~deb10u4.

We recommend that you upgrade your connman packages.

For the detailed security status of connman please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/connman

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: connman
Version: 1.36-2.1~deb10u4
CVE ID: CVE-2023-28488
Debian Bug: 1034393

Topics%20covered

Topics Covered

security advisory denial of service Debian network management connman

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here