MGASA-2022-0319

    Dashboard / Vulnerabilities / MGASA-2022-0319

    MGASA-2022-0319

    Published: 7 Sept 2022Last Modified: 16 Apr 2026

    Summary: Updated connman packages fix security vulnerability

    Details: In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code. (CVE-2022-32292) In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution. (CVE-2022-32293)

    References: https://advisories.mageia.org/MGASA-2022-0319.html, https://bugs.mageia.org/show_bug.cgi?id=30698, https://lists.opensuse.org/archives/list/[email protected]/thread/UWUYL7FE7EBPBC7ZEMY2Q5OKW2V6KZ5F/

    Affected packages

    Package

    Name: connman

    Purl: pkg:rpm/mageia/connman?arch=source&distro=mageia-8

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.38-2.3.mga8

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    MGASA-2022-0319 | CVE-DB