Wind River Support Network

HomeDefectsLIN1021-555

Fixed

LIN1021-555 : Security Advisory - connman - CVE-2021-33833

Created: Jun 9, 2021 Updated: Mar 7, 2022

Resolved Date: Jul 20, 2021

Found In Version: 10.21.20.1

Fix Version: 10.21.20.3

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA).

CREATE(Triage):(User=admin) CVE-2021-33833 (https://nvd.nist.gov/vuln/detail/CVE-2021-33833)

CVEs

CVE-2021-33833