CVE-2017-12865: Buffer Overflow
A flaw was found in ConnMan 1.34 and earlier. Connman DNS-proxy feature forwards DNS queries from the localhost to an external DNS server. The DNS resonse handled from an external DNS server may cause a remote denial-of-service or possibly remote code execution if malformed. The flaw is in the lenght of the variable "name" in src/dnsproxy.c.
Upstream patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=5c281d182ecdd0a424b64f7698f32467f8f67b71
Other sources
Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12865?
CVE-2017-12865 is classified as having a high severity due to the potential for remote denial-of-service and remote code execution.
How do I fix CVE-2017-12865?
To mitigate CVE-2017-12865, upgrade ConnMan to version 1.35 or later.
Which versions of ConnMan are affected by CVE-2017-12865?
CVE-2017-12865 affects ConnMan versions 1.34 and earlier.
Is CVE-2017-12865 a local or remote vulnerability?
CVE-2017-12865 is a remote vulnerability that can be exploited by attackers outside the local environment.
What impact can CVE-2017-12865 have on systems?
Exploitation of CVE-2017-12865 may lead to a remote denial-of-service or allow for remote code execution on the affected systems.