CVE-2022-23098

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published
Jan 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-230995.4OX App Suite through 7.10.6 allows XSS by forcing block-wise read.CVE-2022-23109.8An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and CVE-2022-231009.8OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).CVE-2022-231016.1OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.CVE-2022-231026.1A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerCVE-2022-231039.8A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_0CVE-2022-231047.8WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program OpeCVE-2022-231056.5Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active DirectoCVE-2022-231065.3Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token aCVE-2022-231078.1Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackeCVE-2022-231085.4Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resultiCVE-2022-231096.5Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions whe
CVE-2022-23098: High severity, CVSS 7.5 | Vulnix