CVE-2022-23098

Description

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received.

Affected Platforms

Weakness Type

CWE-835

References

• https://git.kernel.org/pub/scm/network/connman/connman.git/log/
• https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
• https://security.gentoo.org/glsa/202310-21
• https://www.debian.org/security/2022/dsa-5231
• https://www.openwall.com/lists/oss-security/2022/01/25/1
• https://git.kernel.org/pub/scm/network/connman/connman.git/log/