CVE Vulnerabilities

CVE-2022-23098

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Jan 28, 2022 | Modified: Dec 21, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Connman Intel * 1.40 (including)
Connman Ubuntu bionic *
Connman Ubuntu esm-apps/bionic *
Connman Ubuntu esm-apps/xenial *
Connman Ubuntu focal *
Connman Ubuntu impish *
Connman Ubuntu jammy *
Connman Ubuntu trusty *
Connman Ubuntu xenial *

References