[manjaro-security] [ASA-202102-24] connman: multiple issues
Morten Linderud via arch-security
arch-security at lists.archlinux.org
Mon Feb 22 23:39:09 CET 2021
Arch Linux Security Advisory ASA-202102-24
Date : 2021-02-12
CVE-ID : CVE-2021-26675 CVE-2021-26676
Package : connman
Type : multiple issues
Remote : Yes
Link : https://security.archlinux.org/AVG-1543
The package connman before version 1.39-1 is vulnerable to multiple
issues including arbitrary code execution and information disclosure.
Upgrade to 1.39-1.
# pacman -Syu "connman>=1.39-1"
The problems have been fixed upstream in version 1.39.
- CVE-2021-26675 (arbitrary code execution)
A security issue was found in connman 1.38. A stack buffer overflow can
be used to execute code by network adjacent attackers.
- CVE-2021-26676 (information disclosure)
A security issue was found in connman 1.38. A stack information leak
from an uninitialised variable can lead to information disclosure to a
remote attacker. This information can be used to help exploiting
A network adjacent attacker can execute arbitrary code on the affected
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the manjaro-security