CVE-2012-2322: Integer Overflow
Published May 18, 2012
·Updated
Integer overflow in the dhcpv6getoption function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of service (infinite loop and crash) via an invalid length value in a DHCP packet.
Affected Software
84 affected components
ConnMan ConnMan<=0.84
ConnMan ConnMan=0.1
ConnMan ConnMan=0.2
ConnMan ConnMan=0.3
ConnMan ConnMan=0.4
ConnMan ConnMan=0.5
ConnMan ConnMan=0.6
ConnMan ConnMan=0.7
ConnMan ConnMan=0.8
ConnMan ConnMan=0.9
ConnMan ConnMan=0.10
ConnMan ConnMan=0.11
ConnMan ConnMan=0.12
ConnMan ConnMan=0.13
ConnMan ConnMan=0.14
ConnMan ConnMan=0.15
ConnMan ConnMan=0.16
ConnMan ConnMan=0.17
ConnMan ConnMan=0.18
ConnMan ConnMan=0.19
ConnMan ConnMan=0.20
ConnMan ConnMan=0.21
ConnMan ConnMan=0.22
ConnMan ConnMan=0.23
ConnMan ConnMan=0.24
ConnMan ConnMan=0.25
ConnMan ConnMan=0.26
ConnMan ConnMan=0.27
ConnMan ConnMan=0.28
ConnMan ConnMan=0.29
ConnMan ConnMan=0.30
ConnMan ConnMan=0.31
ConnMan ConnMan=0.32
ConnMan ConnMan=0.33
ConnMan ConnMan=0.34
ConnMan ConnMan=0.35
ConnMan ConnMan=0.36
ConnMan ConnMan=0.37
ConnMan ConnMan=0.38
ConnMan ConnMan=0.39
ConnMan ConnMan=0.40
ConnMan ConnMan=0.41
ConnMan ConnMan=0.42
ConnMan ConnMan=0.43
ConnMan ConnMan=0.44
ConnMan ConnMan=0.45
ConnMan ConnMan=0.46
ConnMan ConnMan=0.47
ConnMan ConnMan=0.48
ConnMan ConnMan=0.49
ConnMan ConnMan=0.50
ConnMan ConnMan=0.51
ConnMan ConnMan=0.52
ConnMan ConnMan=0.53
ConnMan ConnMan=0.54
ConnMan ConnMan=0.55
ConnMan ConnMan=0.56
ConnMan ConnMan=0.57
ConnMan ConnMan=0.58
ConnMan ConnMan=0.59
ConnMan ConnMan=0.60
ConnMan ConnMan=0.61
ConnMan ConnMan=0.62
ConnMan ConnMan=0.63
ConnMan ConnMan=0.64
ConnMan ConnMan=0.65
ConnMan ConnMan=0.66
ConnMan ConnMan=0.67
ConnMan ConnMan=0.68
ConnMan ConnMan=0.69
ConnMan ConnMan=0.70
ConnMan ConnMan=0.71
ConnMan ConnMan=0.72
ConnMan ConnMan=0.73
ConnMan ConnMan=0.74
ConnMan ConnMan=0.75
ConnMan ConnMan=0.76
ConnMan ConnMan=0.77
ConnMan ConnMan=0.78
ConnMan ConnMan=0.79
ConnMan ConnMan=0.80
ConnMan ConnMan=0.81
ConnMan ConnMan=0.82
ConnMan ConnMan=0.83
Event History
May 18, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2322?
CVE-2012-2322 has a severity rating classified as high due to its potential to cause denial of service.
2
How do I fix CVE-2012-2322?
To fix CVE-2012-2322, you should update ConnMan to version 0.85 or later.
3
Which versions of ConnMan are affected by CVE-2012-2322?
CVE-2012-2322 affects all ConnMan versions prior to 0.85, including all versions starting from 0.1 up to 0.84.
4
What type of vulnerability is CVE-2012-2322?
CVE-2012-2322 is an integer overflow vulnerability that leads to denial of service.
5
Can CVE-2012-2322 be exploited remotely?
Yes, CVE-2012-2322 can be exploited remotely by sending a specially crafted DHCP packet.