CVE-2023-28488

client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.96% chance of exploitation in the next 30 days, 61st percentile

Published

2023-04-12

Updated

2025-02-08

Proof-of-concept exploits (1)

• moehw/poc_exploits26★ · 2024-11-12

Security advisories

• moehw/poc_exploits/tree/master/CVE-2023-28488
• https://kernel.googlesource.com/pub/scm/network/connman/connman/+/99e2c16ea1cced34a5dc450…

References

• CVE Record
• NVD entry

Related

• CVE-2021-3199
• CVE-2022-29776
• CVE-2022-29777