Unrated severityNVD Advisory· Published Apr 12, 2023· Updated Feb 8, 2025

CVE-2023-28488

Description

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

Affected products

ConnMan/ConnMandescription
osv-coords5 versions
pkg:rpm/opensuse/connman&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/connman&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/connman&distro=openSUSE%20Tumbleweed pkg:rpm/suse/connman&distro=SUSE%20Package%20Hub%2015%20SP4 pkg:rpm/suse/connman&distro=SUSE%20Package%20Hub%2015%20SP5
< 1.42-bp154.2.6.1+ 4 more
- (no CPE)range: < 1.42-bp154.2.6.1
- (no CPE)range: < 1.42-bp155.4.3.1
- (no CPE)range: < 1.42-1.1
- (no CPE)range: < 1.42-bp154.2.6.1
- (no CPE)range: < 1.42-bp155.4.3.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.debian.org/security/2023/dsa-5416mitrevendor-advisory
lists.debian.org/debian-lts-announce/2023/04/msg00024.htmlmitremailing-list
github.com/moehw/poc_exploits/tree/master/CVE-2023-28488mitre
kernel.googlesource.com/pub/scm/network/connman/connman/+/99e2c16ea1cced34a5dc450d76287a1c3e762138mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000