[ GLSA 201812-02 ] ConnMan

[GLSA]

Gentoo Linux Security Advisory

Title: ConnMan: Multiple vulnerabilities (GLSA 201812-02)
Severity: normal
Exploitable: remote
Date: 2018-12-02
Bug(s): #628566, #630028
ID: 201812-02

Synopsis

Multiple vulnerabilities have been found in ConnMan, the worst of
which could result in the remote execution of code.


Background

ConnMan provides a daemon for managing Internet connections.

Affected Packages

Package: net-misc/connman
Vulnerable: < 1.35-r1
Unaffected: >= 1.35-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in ConnMan. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker, via a crafted DNS packet, could remotely execute code
or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All ConnMan users should upgrade to the latest version: