Unrated severityNVD Advisory· Published Apr 12, 2023· Updated Feb 8, 2025

CVE-2023-28488

Description

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Connman/Connmancpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.41
osv-coords5 versions
pkg:rpm/opensuse/connman&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/connman&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/connman&distro=openSUSE%20Tumbleweed pkg:rpm/suse/connman&distro=SUSE%20Package%20Hub%2015%20SP4 pkg:rpm/suse/connman&distro=SUSE%20Package%20Hub%2015%20SP5
< 1.42-bp154.2.6.1+ 4 more
- (no CPE)range: < 1.42-bp154.2.6.1
- (no CPE)range: < 1.42-bp155.4.3.1
- (no CPE)range: < 1.42-1.1
- (no CPE)range: < 1.42-bp154.2.6.1
- (no CPE)range: < 1.42-bp155.4.3.1

Patches

Vulnerability mechanics

References

www.debian.org/security/2023/dsa-5416mitrevendor-advisory
lists.debian.org/debian-lts-announce/2023/04/msg00024.htmlmitremailing-list
github.com/moehw/poc_exploits/tree/master/CVE-2023-28488mitre
kernel.googlesource.com/pub/scm/network/connman/connman/+/99e2c16ea1cced34a5dc450d76287a1c3e762138mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000