diff options
| author | Praveen Kumar <praveen.kumar@windriver.com> | 2025-05-07 11:48:58 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-05-14 06:38:21 -0700 |
| commit | 9b99800fe71a525514351a4236c11e470fbce35a (patch) | |
| tree | 548a2f307596c91ee660e7041a69d3425eadc460 /scripts/lib/scriptutils.py | |
| parent | 73c2187fbc70bf5ddf7a9c4cb212ad1ff9a63885 (diff) | |
| download | poky-9b99800fe71a525514351a4236c11e470fbce35a.tar.gz | |
connman :fix CVE-2025-32743
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c
can be NULL or an empty string when the TC (Truncated) bit is set in
a DNS response. This allows attackers to cause a denial of service
(application crash) or possibly execute arbitrary code, because those
lookup values lead to incorrect length calculations and incorrect
memcpy operations.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32743
Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=d90b911f6760959bdf1393c39fe8d1118315490f
(From OE-Core rev: ece0fb01bf28fa114f0a6e479491b4b6f565c80c)
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/lib/scriptutils.py')
0 files changed, 0 insertions, 0 deletions