CVE-2012-2321

Description

The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.

How to fix CVE-2012-2321

To remediate CVE-2012-2321, upgrade the affected package to a fixed version below.

• Debian/connman—upgrade to 1.0-1 or later

Is CVE-2012-2321 being exploited?

Moderate — EPSS is 5.7%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 1.0-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-2321