OPENSUSE-SU-2021:0452-1

Vulnerability from csaf_opensuse - Published: 2021-03-20 13:05 - Updated: 2026-09-20 19:22
Summary
Security update for connman
Severity
Moderate
Notes
Title of the patch: Security update for connman
Description of the patch: This update for connman fixes the following issues: Update to 1.39 (boo#1181751): * Fix issue with scanning state synchronization and iwd. * Fix issue with invalid key with 4-way handshake offloading. * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675) * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676) Update to 1.38: * Fix issue with online check on IP address update. * Fix issue with OpenVPN and encrypted private keys. * Fix issue with finishing of VPN connections. * Add support for updated stable iwd APIs. * Add support for WireGuard networks. Update to 1.37: * Fix issue with handling invalid gateway addresses. * Fix issue with handling updates of default gateway. * Fix issue with DHCP servers that require broadcast flag. * Add support for option to use gateways as time servers. * Add support for option to select default technology. * Add support for Address Conflict Detection (ACD). * Add support for IPv6 iptables management. Change in 1.36: * Fix issue with DNS short response on error handling. * Fix issue with handling incoming DNS requests. * Fix issue with handling empty timeserver list. * Fix issue with incorrect DHCP byte order. * Fix issue with AllowDomainnameUpdates handling. * Fix issue with IPv4 link-local IP conflict error. * Fix issue with handling WISPr over TLS connections. * Fix issue with WiFi background scanning handling. * Fix issue with WiFi disconnect+connect race condition. * Fix issue with WiFi scanning and tethering operation. * Fix issue with WiFi security change handling. * Fix issue with missing signal for WPS changes. * Fix issue with online check retry handling. * Add support for systemd-resolved backend. * Add support for mDNS configuration setup. This update was imported from the openSUSE:Leap:15.2:Update update project.
Patchnames: openSUSE-2021-452
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2021-26675
8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2021-26676
6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-26675
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for connman",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for connman fixes the following issues:\n\nUpdate to 1.39 (boo#1181751):\n\n* Fix issue with scanning state synchronization and iwd.\n* Fix issue with invalid key with 4-way handshake offloading.\n* Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)\n* Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)\n\nUpdate to 1.38:\n\n* Fix issue with online check on IP address update.\n* Fix issue with OpenVPN and encrypted private keys.\n* Fix issue with finishing of VPN connections.\n* Add support for updated stable iwd APIs.\n* Add support for WireGuard networks.\n\nUpdate to 1.37:\n\n* Fix issue with handling invalid gateway addresses.\n* Fix issue with handling updates of default gateway.\n* Fix issue with DHCP servers that require broadcast flag.\n* Add support for option to use gateways as time servers.\n* Add support for option to select default technology.\n* Add support for Address Conflict Detection (ACD).\n* Add support for IPv6 iptables management.\n\nChange in 1.36:\n\n* Fix issue with DNS short response on error handling.\n* Fix issue with handling incoming DNS requests.\n* Fix issue with handling empty timeserver list.\n* Fix issue with incorrect DHCP byte order.\n* Fix issue with AllowDomainnameUpdates handling.\n* Fix issue with IPv4 link-local IP conflict error.\n* Fix issue with handling WISPr over TLS connections.\n* Fix issue with WiFi background scanning handling.\n* Fix issue with WiFi disconnect+connect race condition.\n* Fix issue with WiFi scanning and tethering operation.\n* Fix issue with WiFi security change handling.\n* Fix issue with missing signal for WPS changes.\n* Fix issue with online check retry handling.\n* Add support for systemd-resolved backend.\n* Add support for mDNS configuration setup.\n\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-452",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0452-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:0452-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6R3XK5JUBLJRIRVG3PVC2DOVU5KBVK/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:0452-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6R3XK5JUBLJRIRVG3PVC2DOVU5KBVK/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181751",
        "url": "https://bugzilla.suse.com/1181751"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-26675 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-26675/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-26676 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-26676/"
      }
    ],
    "title": "Security update for connman",
    "tracking": {
      "current_release_date": "2026-09-20T19:22:53Z",
      "generator": {
        "date": "2021-03-20T13:05:14Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:0452-1",
      "initial_release_date": "2021-03-20T13:05:14Z",
      "revision_history": [
        {
          "date": "2021-03-20T13:05:14Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T19:22:53Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "connman-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-client-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-client-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-client-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-client@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-devel-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-devel-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-devel-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-devel@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-doc-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-doc-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-doc-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-doc@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-nmcompat@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-hh2serial-gps@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-iospm@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-l2tp@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-openconnect@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-openvpn@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-polkit@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-pptp@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-tist@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-vpnc@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-plugin-wireguard@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "connman-test-0:1.39-bp152.4.3.1.x86_64",
                "product": {
                  "name": "connman-test-0:1.39-bp152.4.3.1.x86_64",
                  "product_id": "connman-test-0:1.39-bp152.4.3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/connman-test@1.39-bp152.4.3.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP2",
                "product": {
                  "name": "SUSE Package Hub 15 SP2",
                  "product_id": "SUSE Package Hub 15 SP2"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-client-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-client-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-devel-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-devel-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-doc-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-doc-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-nmcompat-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "connman-test-0:1.39-bp152.4.3.1.x86_64 as component of SUSE Package Hub 15 SP2",
          "product_id": "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
        },
        "product_reference": "connman-test-0:1.39-bp152.4.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-26675",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-26675"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-26675",
          "url": "https://www.suse.com/security/cve/CVE-2021-26675"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181751 for CVE-2021-26675",
          "url": "https://bugzilla.suse.com/1181751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186869 for CVE-2021-26675",
          "url": "https://bugzilla.suse.com/1186869"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-03-20T13:05:14Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-26675"
    },
    {
      "cve": "CVE-2021-26676",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-26676"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
          "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-26676",
          "url": "https://www.suse.com/security/cve/CVE-2021-26676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181751 for CVE-2021-26676",
          "url": "https://bugzilla.suse.com/1181751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186869 for CVE-2021-26676",
          "url": "https://bugzilla.suse.com/1186869"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP2:connman-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-client-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-devel-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-doc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-nmcompat-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-hh2serial-gps-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-iospm-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-l2tp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openconnect-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-openvpn-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-polkit-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-pptp-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-tist-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-vpnc-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-plugin-wireguard-0:1.39-bp152.4.3.1.x86_64",
            "SUSE Package Hub 15 SP2:connman-test-0:1.39-bp152.4.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-03-20T13:05:14Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-26676"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.