CVE-2021-26675: Buffer Overflow
A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/connmanto a version that resolves this vulnerability.Fixed in 1.36-2.1 - Upgrade
Upgrade
ubuntu/connmanto a version that resolves this vulnerability.Fixed in 1.35-6ubuntu0.1~ - Upgrade
Upgrade
ubuntu/connmanto a version that resolves this vulnerability.Fixed in 1.36-2ubuntu0.1 - Upgrade
Upgrade
debian/connmanto a version that resolves this vulnerability.Fixed in 1.36-2.1~deb10u2Fixed in 1.36-2.1~deb10u5Fixed in 1.36-2.2+deb11u2Fixed in 1.41-3Fixed in 1.42-5 - Upgrade
Upgrade
alpine/connmanto a version that resolves this vulnerability.Fixed in 1.39-r0
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-26675.
What is the severity of CVE-2021-26675?
The severity of CVE-2021-26675 is high, with a severity value of 8.8.
What is the affected software?
The affected software is ConnMan versions 1.36-2.1 and earlier.
How can network adjacent attackers exploit CVE-2021-26675?
Network adjacent attackers can exploit CVE-2021-26675 to execute code by triggering a stack-based buffer overflow in dnsproxy.
Where can I find more information about CVE-2021-26675?
You can find more information about CVE-2021-26675 at the following references: [link-1], [link-2], [link-3].