Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.

The remote host is affected by the vulnerability described in GLSA-201812-02 (ConnMan: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ConnMan. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, via a crafted DNS packet, could remotely execute code       or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

In connman, stack-based buffer overflow in 'dnsproxy.c' allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the 'name' variable. 

For Debian 7 'Wheezy', these problems have been fixed in version 1.0-1.1+wheezy2.

We recommend that you upgrade your connman packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security consultants in NRI Secure Technologies discovered a stack overflow vulnerability in ConnMan, a network manager for embedded devices. An attacker with control of the DNS responses to the DNS proxy in ConnMan might crash the service and, in same cases, remotely execute arbitrary commands in the host running the service.

ID	Name	Product	Family	Severity
119321	GLSA-201812-02 : ConnMan: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
102845	Debian DLA-1078-1 : connman security update	Nessus	Debian Local Security Checks	critical
102792	Debian DSA-3956-1 : connman - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2017-12865

critical

Tenable Plugins

critical

critical

critical