CVE-2022-32292
9.8
CRITICAL · CVSS 3.1 · EPSS 3.2% (pctl 88)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 3.19% — more likely to be exploited than 88% of all CVEs |
| Weakness | CWE-787 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-08-03 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| debian | debian linux |
| intel | connman |
References
- https://bugzilla.suse.com/show_bug.cgi?id=1200189
- https://lore.kernel.org/connman/20220801080043.4861-5-wagi%40monom.org/
- https://security.gentoo.org/glsa/202310-21
- https://www.debian.org/security/2022/dsa-5231
- https://bugzilla.suse.com/show_bug.cgi?id=1200189
- https://lore.kernel.org/connman/20220801080043.4861-5-wagi%40monom.org/
- https://security.gentoo.org/glsa/202310-21
- https://www.debian.org/security/2022/dsa-5231
→ the Explorer · watch your stack · NVD