CVE-2017-12865

Critical

Published: 29/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-12865 describes a stack-based buffer overflow in 'dnsproxy.c' in connman versions 1.34 and earlier. This allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the 'name' variable.

Risk Assessment

The organization may experience service outages or unauthorized access to systems, potentially leading to data loss or operational disruptions.

Recommendation

It is recommended to upgrade to a newer version of connman to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.