PT-2021-5557 · Connman+4 · Connman+4

Matthias Gerstner · Published 2021-06-09 · Updated 2024-06-15 · CVE-2021-33833

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ConnMan versions 1.30 through 1.39

Description The issue is related to a stack-based buffer overflow in the dnsproxy package of ConnMan, which can be exploited by a remote attacker to execute arbitrary code. The overflow occurs in the uncompress function in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA records).

Recommendations For versions 1.30 through 1.39, consider disabling the uncompress function in dnsproxy.c as a temporary workaround until a patch is available. Restrict access to the dnsproxy package to minimize the risk of exploitation. Avoid using the NAME, RDATA, or RDLENGTH variables in the affected API endpoints until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2021-2716

ALT-PU-2022-2324

ALT-PU-2022-2468

BDU:2021-06407

CVE-2021-33833

DLA-2915-1

MGASA-2021-0331

OPENSUSE-SU-2024:10692-1

USN-6236-1

Affected Products

Alt Linux

Astra Linux

Connman

Linuxmint

Ubuntu

References · 43

• 🔥 https://github.com/moehw/poc_exploits/tree/master/CVE-2023-28488 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2022/01/25/1 · Exploit
• https://ubuntu.com/security/CVE-2022-32293 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-26676 · Vendor Advisory
• https://lore.kernel.org/connman · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32292 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-28488 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-06407 · Security Note
• https://ubuntu.com/security/CVE-2022-23096 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10692-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23098 · Vendor Advisory
• https://security.gentoo.org/glsa/202107-29 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33833 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33833 · Vendor Advisory