CVE-2025-32743: Critical severity connman vulnerability
In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code, because those lookup values lead to incorrect length calculations and incorrect memcpy operations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32743?
CVE-2025-32743 is considered a high severity vulnerability due to the potential for denial of service and arbitrary code execution.
How do I fix CVE-2025-32743?
To fix CVE-2025-32743, upgrade ConnMan to a version later than 1.44 where the vulnerability has been addressed.
What types of vulnerabilities are associated with CVE-2025-32743?
CVE-2025-32743 is associated with denial of service and possible arbitrary code execution vulnerabilities.
Which versions of ConnMan are affected by CVE-2025-32743?
CVE-2025-32743 affects ConnMan versions up to and including 1.44.
How does CVE-2025-32743 impact system security?
CVE-2025-32743 impacts system security by potentially allowing attackers to crash the application or execute malicious code.