CVE-2012-2320: High severity connman vulnerability

Q: What is the severity of CVE-2012-2320?

CVE-2012-2320 is considered a moderate severity vulnerability as it allows remote attackers to cause a denial of service.

Q: How do I fix CVE-2012-2320?

To fix CVE-2012-2320, update ConnMan to version 0.85 or later, where this issue has been addressed.

Q: What type of attack is possible with CVE-2012-2320?

CVE-2012-2320 enables attackers to send crafted netlink messages that can bypass access restrictions and potentially crash the system.

Q: Which versions of ConnMan are affected by CVE-2012-2320?

CVE-2012-2320 affects ConnMan versions prior to 0.85, including all versions from 0.1 to 0.84.

Q: Is CVE-2012-2320 exploitable remotely?

Yes, CVE-2012-2320 is exploitable remotely, allowing attackers to send malicious messages without physical access to the device.

Published May 18, 2012

Updated

ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.

Affected Software

84 affected components

ConnMan ConnMan<=0.84

ConnMan ConnMan=0.1

ConnMan ConnMan=0.2

ConnMan ConnMan=0.3

ConnMan ConnMan=0.4

ConnMan ConnMan=0.5

ConnMan ConnMan=0.6

ConnMan ConnMan=0.7

ConnMan ConnMan=0.8

ConnMan ConnMan=0.9

ConnMan ConnMan=0.10

ConnMan ConnMan=0.11

ConnMan ConnMan=0.12

ConnMan ConnMan=0.13

ConnMan ConnMan=0.14

ConnMan ConnMan=0.15

ConnMan ConnMan=0.16

ConnMan ConnMan=0.17

ConnMan ConnMan=0.18

ConnMan ConnMan=0.19

ConnMan ConnMan=0.20

ConnMan ConnMan=0.21

ConnMan ConnMan=0.22

ConnMan ConnMan=0.23

ConnMan ConnMan=0.24

ConnMan ConnMan=0.25

ConnMan ConnMan=0.26

ConnMan ConnMan=0.27

ConnMan ConnMan=0.28

ConnMan ConnMan=0.29

ConnMan ConnMan=0.30

ConnMan ConnMan=0.31

ConnMan ConnMan=0.32

ConnMan ConnMan=0.33

ConnMan ConnMan=0.34

ConnMan ConnMan=0.35

ConnMan ConnMan=0.36

ConnMan ConnMan=0.37

ConnMan ConnMan=0.38

ConnMan ConnMan=0.39

ConnMan ConnMan=0.40

ConnMan ConnMan=0.41

ConnMan ConnMan=0.42

ConnMan ConnMan=0.43

ConnMan ConnMan=0.44

ConnMan ConnMan=0.45

ConnMan ConnMan=0.46

ConnMan ConnMan=0.47

ConnMan ConnMan=0.48

ConnMan ConnMan=0.49

ConnMan ConnMan=0.50

ConnMan ConnMan=0.51

ConnMan ConnMan=0.52

ConnMan ConnMan=0.53

ConnMan ConnMan=0.54

ConnMan ConnMan=0.55

ConnMan ConnMan=0.56

ConnMan ConnMan=0.57

ConnMan ConnMan=0.58

ConnMan ConnMan=0.59

ConnMan ConnMan=0.60

ConnMan ConnMan=0.61

ConnMan ConnMan=0.62

ConnMan ConnMan=0.63

ConnMan ConnMan=0.64

ConnMan ConnMan=0.65

ConnMan ConnMan=0.66

ConnMan ConnMan=0.67

ConnMan ConnMan=0.68

ConnMan ConnMan=0.69

ConnMan ConnMan=0.70

ConnMan ConnMan=0.71

ConnMan ConnMan=0.72

ConnMan ConnMan=0.73

ConnMan ConnMan=0.74

ConnMan ConnMan=0.75

ConnMan ConnMan=0.76

ConnMan ConnMan=0.77

ConnMan ConnMan=0.78

ConnMan ConnMan=0.79

ConnMan ConnMan=0.80

ConnMan ConnMan=0.81

ConnMan ConnMan=0.82

ConnMan ConnMan=0.83

Event History

May 18, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2320?

CVE-2012-2320 is considered a moderate severity vulnerability as it allows remote attackers to cause a denial of service.

How do I fix CVE-2012-2320?

To fix CVE-2012-2320, update ConnMan to version 0.85 or later, where this issue has been addressed.

What type of attack is possible with CVE-2012-2320?

CVE-2012-2320 enables attackers to send crafted netlink messages that can bypass access restrictions and potentially crash the system.

Which versions of ConnMan are affected by CVE-2012-2320?

CVE-2012-2320 affects ConnMan versions prior to 0.85, including all versions from 0.1 to 0.84.

Is CVE-2012-2320 exploitable remotely?