Back to Database
Status published
Medium
CVE-2021-26676
gdhcp in ConnMan before 1.39 could be used by network-adjacent...
Vulnerability Description
gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26676
Credits & Attribution
No credits recorded in the NVD database.
References
- https://bugzilla.suse.com/show_bug.cgi?id=1181751
- https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog
- https://www.openwall.com/lists/oss-security/2021/02/08/2
- https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=a74524b3e3fad81b0fd1084ffdf9f2ea469cd9b1
- https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=58d397ba74873384aee449690a9070bacd5676fa
- https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html
- https://www.debian.org/security/2021/dsa-4847
- https://kunnamon.io/tbone/
- https://security.gentoo.org/glsa/202107-29
More from intel
View All →CVE-2022-32293
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR...
High
8.1
CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP...
Critical
9.8
CVE-2022-23098
An issue was discovered in the DNS proxy in Connman...
High
7.5
CVE-2022-23097
An issue was discovered in the DNS proxy in Connman...
Critical
9.1
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman...
Unknown
0
Affected Vendor
intel
View all reports →Affected Software
connman, debian linux, leap
Vulnerable Versions:
0, 9.0, 10.0, 15.2
Timeline
Official Publish:
February 9th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.