Integer Overflow in ConnMan Leading to Denial of Service
CVE-2012-2322

Currently unrated

Key Information:

Vendor

Connman

Status
Connman
Vendor
CVE Published:
18 May 2012

What is CVE-2012-2322?

The vulnerability arises from an integer overflow in the dhcpv6_get_option function within ConnMan's client code prior to version 0.85. Remote attackers are able to craft malicious DHCP packets that include invalid length values, triggering an infinite loop that can lead to a denial of service. This impacts the stability of systems running ConnMan, causing crashes and preventing legitimate user access.

References

http://www.securityfocus.com/bid/53410
vdb-entryx_refsource_BID
http://www.osvdb.org/81706
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/75420
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.