CVE-2022-32292
CVE-2022-32292
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
CVSS 9.8 · Critical · EPSS 3.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
connman Debian:12
- Affected ranges
- ECOSYSTEM: < 1.41-2
Update to 1.41-2
connman Debian:13
- Affected ranges
- ECOSYSTEM: < 1.41-2
Update to 1.41-2
connman Debian:14
- Affected ranges
- ECOSYSTEM: < 1.41-2
Update to 1.41-2
connman Ubuntu:Pro:16.04:LTS
- Versions
- 1.21-1.2
- 1.21-1.2build1
- 1.21-1.2build2
- 1.21-1.2+deb8u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: < 1.21-1.2+deb8u1ubuntu0.1~esm1
Update to 1.21-1.2+deb8u1ubuntu0.1~esm1
connman Ubuntu:Pro:18.04:LTS
- Versions
- 1.35-1
- 1.35-2
- 1.35-6
- Affected ranges
- ECOSYSTEM: < 1.35-6ubuntu0.1~esm1
Update to 1.35-6ubuntu0.1~esm1
connman Ubuntu:20.04:LTS
- Versions
- 1.36-2build1
- Affected ranges
- ECOSYSTEM: < 1.36-2ubuntu0.1
Update to 1.36-2ubuntu0.1
connman Ubuntu:22.04:LTS
- Versions
- 1.36-2.2build1
- 1.36-2.3
- 1.36-2.3build1
- Affected ranges
- ECOSYSTEM: < 1.36-2.3ubuntu0.1
Update to 1.36-2.3ubuntu0.1