Vulnerabilities > CVE-2023-28488 - Out-of-bounds Write vulnerability in Intel Connman

CVSS 6.5 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

low complexity

intel

CWE-787

NVD

Published: 2023-04-12

Updated: 2023-05-31

Summary

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Connman 0.55 Intel Connman 0.56 Intel Connman 0.57 Intel Connman 0.58 Intel Connman 0.59 Intel Connman 0.60 Intel Connman 0.61 Intel Connman 0.62 Intel Connman 0.63 Intel Connman 0.64 Intel Connman 0.65 Intel Connman 0.66 Intel Connman 0.67 Intel Connman 0.68 Intel Connman 0.69 Intel Connman 0.70 Intel Connman 0.71 Intel Connman 0.72 Intel Connman 0.73 Intel Connman 0.74 Intel Connman 0.75 Intel Connman 0.76 Intel Connman 0.77 Intel Connman 0.78 Intel Connman 0.79 Intel Connman 0.80 Intel Connman 0.81 Intel Connman 0.82 Intel Connman 0.83 Intel Connman 0.84 Intel Connman 0.85 Intel Connman 1.0 Intel Connman 1.1 Intel Connman 1.2 Intel Connman 1.3 Intel Connman 1.4 Intel Connman 1.5 Intel Connman 1.6 Intel Connman 1.7 Intel Connman 1.8 Intel Connman 1.9 Intel Connman 1.10 Intel Connman 1.11 Intel Connman 1.12 Intel Connman 1.13 Intel Connman 1.14 Intel Connman 1.15 Intel Connman 1.16 Intel Connman 1.17 Intel Connman 1.18 Intel Connman 1.19 Intel Connman 1.20 Intel Connman 1.21 Intel Connman 1.22 Intel Connman 1.23 Intel Connman 1.24 Intel Connman 1.25 Intel Connman 1.26 Intel Connman 1.27 Intel Connman 1.28 Intel Connman 1.29 Intel Connman 1.30 Intel Connman 1.31 Intel Connman 1.32 Intel Connman 1.33 Intel Connman 1.34 Intel Connman 1.35 Intel Connman 1.36 Intel Connman 1.37 Intel Connman 1.38 Intel Connman 1.39 Intel Connman 1.40 Intel Connman 1.41	73

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References