CVE-2017-12865

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3956Third Party Advisory
http://www.securityfocus.com/bid/100498Third Party Advisory, VDB Entry
https://01.org/security/intel-oss-10001/intel-oss-10001Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1483720Issue Tracking, Patch, Third Party Advisory
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=5c281d182ecdd0a424b64f7698f32467f8f67b71Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201812-02Third Party Advisory
https://www.nri-secure.com/blog/new-iot-vulnerability-connmandoThird Party Advisory
http://www.debian.org/security/2017/dsa-3956Third Party Advisory
http://www.securityfocus.com/bid/100498Third Party Advisory, VDB Entry
https://01.org/security/intel-oss-10001/intel-oss-10001Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1483720Issue Tracking, Patch, Third Party Advisory
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=5c281d182ecdd0a424b64f7698f32467f8f67b71Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201812-02Third Party Advisory
https://www.nri-secure.com/blog/new-iot-vulnerability-connmandoThird Party Advisory

Timeline

Published: Aug 29, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-128675.9The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its CVE-2017-128689.8The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows atta CVE-2017-128697.5The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an a CVE-2017-12875.4IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim CVE-2017-128705.9SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the ae CVE-2017-128715.9The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attac CVE-2017-128725.9The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow r CVE-2017-128739.8SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified oth CVE-2017-128747.5The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signat CVE-2017-128756.5The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a craft CVE-2017-128766.5Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted fil CVE-2017-128776.5Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial