Skip to main content

Connection Manager

1 CVEs product

Monthly

CVE-2021-33833 Jun 09, 18:15 CRITICAL POC Act Now

ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian Intel Debian Linux +1
NVD
CVSS 3.1
9.8
EPSS
2.9%
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy