CVE-2025-32366: Medium severity connman vulnerability
In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohs(rr->rdlen) and memcpy(response+offset,end,rdlen) without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining packet data in the current state of parsing. Values of stack memory locations may be sent over the network in a response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32366?
CVE-2025-32366 is considered a high severity vulnerability due to the potential for unauthorized memory access.
How do I fix CVE-2025-32366?
To fix CVE-2025-32366, upgrade ConnMan to version 1.45 or later where the vulnerability is addressed.
What components are affected by CVE-2025-32366?
CVE-2025-32366 affects ConnMan versions up to and including 1.44, specifically the dnsproxy component.
What type of vulnerability is CVE-2025-32366?
CVE-2025-32366 is a memory corruption vulnerability caused by improper use of memcpy based on variable data length.
Can CVE-2025-32366 lead to system compromise?
Yes, CVE-2025-32366 can potentially lead to system compromise by allowing attackers to exploit memory corruption.