CVE-2022-32293 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-32293 Interim 1 7 2025-02-16T03:00:27Z current 2022-08-02T23:32:03Z 2025-02-16T03:00:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-32293 In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UWUYL7FE7EBPBC7ZEMY2Q5OKW2V6KZ5F/ E-Mail link for openSUSE-SU-2022:10076-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B4BBTRFMU2YGB6OYSRTK6AGKO32CD5I3/ E-Mail link for openSUSE-SU-2022:10134-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP3 SUSE Package Hub 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed connman-1.41-4.1 connman-1.41-bp153.2.6.1 connman-1.41-bp154.2.3.1 connman-client-1.41-4.1 connman-client-1.41-bp153.2.6.1 connman-client-1.41-bp154.2.3.1 connman-devel-1.41-4.1 connman-devel-1.41-bp153.2.6.1 connman-devel-1.41-bp154.2.3.1 connman-doc-1.41-4.1 connman-doc-1.41-bp153.2.6.1 connman-doc-1.41-bp154.2.3.1 connman-nmcompat-1.41-4.1 connman-nmcompat-1.41-bp153.2.6.1 connman-nmcompat-1.41-bp154.2.3.1 connman-plugin-hh2serial-gps-1.41-4.1 connman-plugin-hh2serial-gps-1.41-bp153.2.6.1 connman-plugin-hh2serial-gps-1.41-bp154.2.3.1 connman-plugin-iospm-1.41-4.1 connman-plugin-iospm-1.41-bp153.2.6.1 connman-plugin-iospm-1.41-bp154.2.3.1 connman-plugin-l2tp-1.41-4.1 connman-plugin-l2tp-1.41-bp153.2.6.1 connman-plugin-l2tp-1.41-bp154.2.3.1 connman-plugin-openconnect-1.41-4.1 connman-plugin-openvpn-1.41-4.1 connman-plugin-openvpn-1.41-bp153.2.6.1 connman-plugin-openvpn-1.41-bp154.2.3.1 connman-plugin-polkit-1.41-4.1 connman-plugin-polkit-1.41-bp153.2.6.1 connman-plugin-polkit-1.41-bp154.2.3.1 connman-plugin-pptp-1.41-4.1 connman-plugin-pptp-1.41-bp153.2.6.1 connman-plugin-pptp-1.41-bp154.2.3.1 connman-plugin-tist-1.41-4.1 connman-plugin-tist-1.41-bp153.2.6.1 connman-plugin-tist-1.41-bp154.2.3.1 connman-plugin-vpnc-1.41-4.1 connman-plugin-vpnc-1.41-bp153.2.6.1 connman-plugin-vpnc-1.41-bp154.2.3.1 connman-plugin-wireguard-1.41-4.1 connman-plugin-wireguard-1.41-bp153.2.6.1 connman-plugin-wireguard-1.41-bp154.2.3.1 connman-test-1.41-4.1 connman-test-1.41-bp153.2.6.1 connman-test-1.41-bp154.2.3.1 connman-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-client-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-devel-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-doc-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-nmcompat-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-hh2serial-gps-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-iospm-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-l2tp-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-openvpn-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-polkit-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-pptp-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-tist-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-vpnc-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-plugin-wireguard-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-test-1.41-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 connman-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-client-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-devel-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-doc-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-nmcompat-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-hh2serial-gps-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-iospm-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-l2tp-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-openvpn-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-polkit-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-pptp-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-tist-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-vpnc-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-plugin-wireguard-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-test-1.41-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 connman-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-client-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-devel-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-doc-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-nmcompat-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-hh2serial-gps-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-iospm-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-l2tp-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-openvpn-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-polkit-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-pptp-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-tist-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-vpnc-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-plugin-wireguard-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-test-1.41-bp153.2.6.1 as a component of openSUSE Leap 15.3 connman-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-client-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-devel-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-doc-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-nmcompat-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-hh2serial-gps-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-iospm-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-l2tp-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-openvpn-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-polkit-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-pptp-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-tist-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-vpnc-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-plugin-wireguard-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-test-1.41-bp154.2.3.1 as a component of openSUSE Leap 15.4 connman-1.41-4.1 as a component of openSUSE Tumbleweed connman-client-1.41-4.1 as a component of openSUSE Tumbleweed connman-devel-1.41-4.1 as a component of openSUSE Tumbleweed connman-doc-1.41-4.1 as a component of openSUSE Tumbleweed connman-nmcompat-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-hh2serial-gps-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-iospm-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-l2tp-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-openconnect-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-openvpn-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-polkit-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-pptp-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-tist-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-vpnc-1.41-4.1 as a component of openSUSE Tumbleweed connman-plugin-wireguard-1.41-4.1 as a component of openSUSE Tumbleweed connman-test-1.41-4.1 as a component of openSUSE Tumbleweed In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution. CVE-2022-32293 SUSE Package Hub 15 SP3:connman-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-client-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-devel-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-doc-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-nmcompat-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-hh2serial-gps-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-iospm-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-l2tp-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-openvpn-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-polkit-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-pptp-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-tist-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-vpnc-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-plugin-wireguard-1.41-bp153.2.6.1 SUSE Package Hub 15 SP3:connman-test-1.41-bp153.2.6.1 SUSE Package Hub 15 SP4:connman-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-client-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-devel-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-doc-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-nmcompat-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-hh2serial-gps-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-iospm-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-l2tp-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-openvpn-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-polkit-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-pptp-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-tist-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-vpnc-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-plugin-wireguard-1.41-bp154.2.3.1 SUSE Package Hub 15 SP4:connman-test-1.41-bp154.2.3.1 openSUSE Leap 15.3:connman-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-client-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-devel-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-doc-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-nmcompat-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-hh2serial-gps-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-iospm-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-l2tp-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-openvpn-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-polkit-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-pptp-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-tist-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-vpnc-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-plugin-wireguard-1.41-bp153.2.6.1 openSUSE Leap 15.3:connman-test-1.41-bp153.2.6.1 openSUSE Leap 15.4:connman-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-client-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-devel-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-doc-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-nmcompat-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-hh2serial-gps-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-iospm-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-l2tp-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-openvpn-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-polkit-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-pptp-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-tist-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-vpnc-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-plugin-wireguard-1.41-bp154.2.3.1 openSUSE Leap 15.4:connman-test-1.41-bp154.2.3.1 openSUSE Tumbleweed:connman-1.41-4.1 openSUSE Tumbleweed:connman-client-1.41-4.1 openSUSE Tumbleweed:connman-devel-1.41-4.1 openSUSE Tumbleweed:connman-doc-1.41-4.1 openSUSE Tumbleweed:connman-nmcompat-1.41-4.1 openSUSE Tumbleweed:connman-plugin-hh2serial-gps-1.41-4.1 openSUSE Tumbleweed:connman-plugin-iospm-1.41-4.1 openSUSE Tumbleweed:connman-plugin-l2tp-1.41-4.1 openSUSE Tumbleweed:connman-plugin-openconnect-1.41-4.1 openSUSE Tumbleweed:connman-plugin-openvpn-1.41-4.1 openSUSE Tumbleweed:connman-plugin-polkit-1.41-4.1 openSUSE Tumbleweed:connman-plugin-pptp-1.41-4.1 openSUSE Tumbleweed:connman-plugin-tist-1.41-4.1 openSUSE Tumbleweed:connman-plugin-vpnc-1.41-4.1 openSUSE Tumbleweed:connman-plugin-wireguard-1.41-4.1 openSUSE Tumbleweed:connman-test-1.41-4.1 important 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H