tocsin

Debian/connman: unknown

The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.

Action: Upgrade connman to 1.0-1 or later.

Affected

introducedfixedlast affected
01.0-1-

Fixed versions

1.0-1

Sources

published · modified · JSON