CVE-2023-28488

Name of the Vulnerable Software and Affected Versions ConnMan versions through 1.41

Description The issue is related to a buffer overflow in the client.c component of ConnMan's gdhcp, which can be exploited by network-adjacent attackers operating a crafted DHCP server. This can cause a stack-based buffer overflow, leading to a denial of service and terminating the connman process.

Recommendations For versions through 1.41, consider disabling the client.c component in gdhcp until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.