Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of service (infinite loop and crash) via an invalid length value in a DHCP packet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Connman | Connman | * | 0.84 (including) |
| Connman | Connman | 0.1 (including) | 0.1 (including) |
| Connman | Connman | 0.2 (including) | 0.2 (including) |
| Connman | Connman | 0.3 (including) | 0.3 (including) |
| Connman | Connman | 0.4 (including) | 0.4 (including) |
| Connman | Connman | 0.5 (including) | 0.5 (including) |
| Connman | Connman | 0.6 (including) | 0.6 (including) |
| Connman | Connman | 0.7 (including) | 0.7 (including) |
| Connman | Connman | 0.8 (including) | 0.8 (including) |
| Connman | Connman | 0.9 (including) | 0.9 (including) |
| Connman | Connman | 0.10 (including) | 0.10 (including) |
| Connman | Connman | 0.11 (including) | 0.11 (including) |
| Connman | Connman | 0.12 (including) | 0.12 (including) |
| Connman | Connman | 0.13 (including) | 0.13 (including) |
| Connman | Connman | 0.14 (including) | 0.14 (including) |
| Connman | Connman | 0.15 (including) | 0.15 (including) |
| Connman | Connman | 0.16 (including) | 0.16 (including) |
| Connman | Connman | 0.17 (including) | 0.17 (including) |
| Connman | Connman | 0.18 (including) | 0.18 (including) |
| Connman | Connman | 0.19 (including) | 0.19 (including) |
| Connman | Connman | 0.20 (including) | 0.20 (including) |
| Connman | Connman | 0.21 (including) | 0.21 (including) |
| Connman | Connman | 0.22 (including) | 0.22 (including) |
| Connman | Connman | 0.23 (including) | 0.23 (including) |
| Connman | Connman | 0.24 (including) | 0.24 (including) |
| Connman | Connman | 0.25 (including) | 0.25 (including) |
| Connman | Connman | 0.26 (including) | 0.26 (including) |
| Connman | Connman | 0.27 (including) | 0.27 (including) |
| Connman | Connman | 0.28 (including) | 0.28 (including) |
| Connman | Connman | 0.29 (including) | 0.29 (including) |
| Connman | Connman | 0.30 (including) | 0.30 (including) |
| Connman | Connman | 0.31 (including) | 0.31 (including) |
| Connman | Connman | 0.32 (including) | 0.32 (including) |
| Connman | Connman | 0.33 (including) | 0.33 (including) |
| Connman | Connman | 0.34 (including) | 0.34 (including) |
| Connman | Connman | 0.35 (including) | 0.35 (including) |
| Connman | Connman | 0.36 (including) | 0.36 (including) |
| Connman | Connman | 0.37 (including) | 0.37 (including) |
| Connman | Connman | 0.38 (including) | 0.38 (including) |
| Connman | Connman | 0.39 (including) | 0.39 (including) |
| Connman | Connman | 0.40 (including) | 0.40 (including) |
| Connman | Connman | 0.41 (including) | 0.41 (including) |
| Connman | Connman | 0.42 (including) | 0.42 (including) |
| Connman | Connman | 0.43 (including) | 0.43 (including) |
| Connman | Connman | 0.44 (including) | 0.44 (including) |
| Connman | Connman | 0.45 (including) | 0.45 (including) |
| Connman | Connman | 0.46 (including) | 0.46 (including) |
| Connman | Connman | 0.47 (including) | 0.47 (including) |
| Connman | Connman | 0.48 (including) | 0.48 (including) |
| Connman | Connman | 0.49 (including) | 0.49 (including) |
| Connman | Connman | 0.50 (including) | 0.50 (including) |
| Connman | Connman | 0.51 (including) | 0.51 (including) |
| Connman | Connman | 0.52 (including) | 0.52 (including) |
| Connman | Connman | 0.53 (including) | 0.53 (including) |
| Connman | Connman | 0.54 (including) | 0.54 (including) |
| Connman | Connman | 0.55 (including) | 0.55 (including) |
| Connman | Connman | 0.56 (including) | 0.56 (including) |
| Connman | Connman | 0.57 (including) | 0.57 (including) |
| Connman | Connman | 0.58 (including) | 0.58 (including) |
| Connman | Connman | 0.59 (including) | 0.59 (including) |
| Connman | Connman | 0.60 (including) | 0.60 (including) |
| Connman | Connman | 0.61 (including) | 0.61 (including) |
| Connman | Connman | 0.62 (including) | 0.62 (including) |
| Connman | Connman | 0.63 (including) | 0.63 (including) |
| Connman | Connman | 0.64 (including) | 0.64 (including) |
| Connman | Connman | 0.65 (including) | 0.65 (including) |
| Connman | Connman | 0.66 (including) | 0.66 (including) |
| Connman | Connman | 0.67 (including) | 0.67 (including) |
| Connman | Connman | 0.68 (including) | 0.68 (including) |
| Connman | Connman | 0.69 (including) | 0.69 (including) |
| Connman | Connman | 0.70 (including) | 0.70 (including) |
| Connman | Connman | 0.71 (including) | 0.71 (including) |
| Connman | Connman | 0.72 (including) | 0.72 (including) |
| Connman | Connman | 0.73 (including) | 0.73 (including) |
| Connman | Connman | 0.74 (including) | 0.74 (including) |
| Connman | Connman | 0.75 (including) | 0.75 (including) |
| Connman | Connman | 0.76 (including) | 0.76 (including) |
| Connman | Connman | 0.77 (including) | 0.77 (including) |
| Connman | Connman | 0.78 (including) | 0.78 (including) |
| Connman | Connman | 0.79 (including) | 0.79 (including) |
| Connman | Connman | 0.80 (including) | 0.80 (including) |
| Connman | Connman | 0.81 (including) | 0.81 (including) |
| Connman | Connman | 0.82 (including) | 0.82 (including) |
| Connman | Connman | 0.83 (including) | 0.83 (including) |
| Connman | Ubuntu | lucid | * |
| Connman | Ubuntu | natty | * |
| Connman | Ubuntu | oneiric | * |
| Connman | Ubuntu | precise | * |
| Connman | Ubuntu | quantal | * |
| Connman | Ubuntu | raring | * |
| Connman | Ubuntu | saucy | * |
| Connman | Ubuntu | upstream | * |
| Connman | Ubuntu | utopic | * |
| Connman | Ubuntu | vivid | * |
| Connman | Ubuntu | wily | * |
| Connman | Ubuntu | yakkety | * |