Medium severity6.5NVD Advisory· Published Apr 12, 2023· Updated Jun 17, 2026

CVE-2023-28488

Description

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords5 versions
pkg:rpm/opensuse/connman&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/connman&distro=SUSE%20Package%20Hub%2015%20SP5 pkg:rpm/suse/connman&distro=SUSE%20Package%20Hub%2015%20SP4 pkg:rpm/opensuse/connman&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/connman&distro=openSUSE%20Leap%2015.5
< 1.42-bp154.2.6.1+ 4 more
- (no CPE)range: < 1.42-bp154.2.6.1
- (no CPE)range: < 1.42-bp155.4.3.1
- (no CPE)range: < 1.42-bp154.2.6.1
- (no CPE)range: < 1.42-1.1
- (no CPE)range: < 1.42-bp155.4.3.1
Connman/Connmanllm-fuzzy2 versions
<=1.41+ 1 more
- (no CPE)range: <=1.41
- (no CPE)
Intel/Connman
cpe:2.3:a:intel:connman:*:*:*:*:*:*:*:*
Range: >=0.55,<=1.41

Patches

Vulnerability mechanics

References

kernel.googlesource.com/pub/scm/network/connman/connman/+/99e2c16ea1cced34a5dc450d76287a1c3e762138nvdPatch
github.com/moehw/poc_exploits/tree/master/CVE-2023-28488nvdExploitPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2023/04/msg00024.htmlnvd
www.debian.org/security/2023/dsa-5416nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000