Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Gentoo: GLSA-202107-30 Critical: SystemD Privilege Escalation Flaw

gentoo
Calendar Grey July 11, 2021
Dist Gentoo Esm H88
Gentoo Linux Security Advisory GLSA 202107-30 describes vulnerabilities in OpenSSH that could lead to unauthorized access.
A buffer overflow in ConnMan might allow remote attacker(s) to execute arbitrary code.

Summary

Multiple vulnerabilities have been discovered in connman. Please review the CVE identifiers referenced below for details.

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow remote code execution normal severity ConnMan

Resolution

All ConnMan users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/connman-1.40"

References

[ 1 ] CVE-2021-26675 https://nvd.nist.gov/vuln/detail/CVE-2021-26675 [ 2 ] CVE-2021-26676 https://nvd.nist.gov/vuln/detail/CVE-2021-26676 [ 3 ] CVE-2021-33833 https://nvd.nist.gov/vuln/detail/CVE-2021-33833

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-29
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity
critical
Lowest
Low
Medium
High
Critical

Severity: Normal
Title: ConnMan: Multiple vulnerabilities
Date: July 12, 2021
Bugs: #769491, #795084
ID: 202107-29

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow remote code execution normal severity ConnMan

Synopsis

A buffer overflow in ConnMan might allow remote attacker(s) to execute arbitrary code.

Background

ConnMan provides a daemon for managing Internet connections.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/connman < 1.40 >= 1.40

Impact

===== Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Your message here