PT-2021-2220

CVE-2021-26676

·

Published

2021-02-08

·

Updated

2026-09-30

Description by

CVSS 3.1
6.5
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ConnMan versions prior to 1.39
Description The issue is related to a memory release error in the gdhcp component of ConnMan, which could be exploited by network-adjacent attackers to leak sensitive stack information. This leak could potentially allow for further exploitation of bugs in gdhcp.
Recommendations For versions prior to 1.39, update to version 1.39 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation by network-adjacent attackers.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2021-1242
ALT-PU-2022-2468
CLEANSTART-2024-VF39439
DLA-2552-1
DSA-4847-1
MGASA-2021-0195
OPENSUSE-SU-2021:0416-1
OPENSUSE-SU-2021_0416-1
OPENSUSE-SU-2021:0452-1
OPENSUSE-SU-2024:10692-1
USN-6236-1
Found an issue in the description? Have something to add? Feel free to write us 👾