All errata/sisyphus/ALT-PU-2021-1242-1
ALT-PU-2021-1242-1

Package update connman in branch sisyphus

Version1.39-alt1
Task#266006
Published2021-02-09
Max severityHIGH
Severity:

Closed issues (4)

BDU:2021-01128
HIGH8.8

Уязвимость пакета dnsproxy диспетчера соединений Connman, позволяющая нарушителю выполнить произвольный код

Published: 2021-03-04Modified: 2022-10-17
CVSS 3.xHIGH 8.8
CVSS:3.x/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0MEDIUM 5.8
CVSS:2.0/AV:A/AC:L/Au:N/C:P/I:P/A:P
References
BDU:2021-01129
MEDIUM6.5

Уязвимость компонента gdhcp диспетчера соединений Connman, позволяющая нарушителю раскрыть защищаемую информацию

Published: 2021-03-04Modified: 2022-10-17
CVSS 3.xMEDIUM 6.5
CVSS:3.x/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0LOW 3.3
CVSS:2.0/AV:A/AC:L/Au:N/C:P/I:N/A:N
References
CVE-2021-26675
HIGH8.8

A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.

Published: 2021-02-09Modified: 2024-11-21
CVSS 2.0MEDIUM 5.8
CVSS:2.0/AV:A/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
CVE-2021-26676
MEDIUM6.5

gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp.

Published: 2021-02-09Modified: 2024-11-21
CVSS 2.0LOW 3.3
CVSS:2.0/AV:A/AC:L/Au:N/C:P/I:N/A:N
CVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References