[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU5g8aT6icvLO23knnYF78ZpPq_J8PN28WMcly8u_6cQ":3,"g5a-risk:CVE-2022-23096":145},{"success":4,"data":5,"meta":143},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":61,"references":62,"referencesCount":86,"weaknesses":87,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":27,"otxData":27,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":141,"notableEvents":142},"CVE-2022-23096","What is CVE-2022-23096?","An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read.","An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Dat...","2022-01-28T16:15:07.897","2024-10-15T16:35:01.44",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":41,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:P","PARTIAL",6.4,"MEDIUM",10,4.9,0.02598,[44,44,44,44,44,44,44],"Critical",[48,53,58],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"intel","connman","*","cpe:2.3:a:intel:connman:*:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",3,[63,69,74,78,81],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgit.kernel.org\u002Fpub\u002Fscm\u002Fnetwork\u002Fconnman\u002Fconnman.git\u002Flog\u002F","Kernel",[67,68],"Product","Third Party Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F02\u002Fmsg00009.html","Debian",[73,68],"Mailing List",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-21","Gentoo",[68],{"url":79,"source":71,"tags":80},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2022\u002Fdsa-5231",[68],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2022\u002F01\u002F25\u002F1","Openwall",[85,73,68],"Exploit",5,[88],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2022-23096? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-23096, a critical severity cyber security vulnerability from 2022. An issue was discovered in the DNS proxy in Connman thr...","CVE-2022-23096, CVE-2022-23096 vulnerability, CVE-2022-23096 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, intel security, debian security, connman vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2022-23096",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-23096","Cybersecurity","CVE-2022-23096, CVE-2022-23096 vulnerability, CVE-2022-23096 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125,133],{"Operator":27,"Negate":27,"Nodes":126},[127],{"Operator":128,"Negate":27,"CPEMatch":129},"OR",[130],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":132},"615FEE20-6784-4244-BF44-2CC6DFA8E9CD","1.40",{"Operator":27,"Negate":27,"Nodes":134},[135],{"Operator":128,"Negate":27,"CPEMatch":136},[137,139],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[],{"lastModified":11,"cacheTime":144,"version":37},1792347635714,{"score":146,"band":147,"action":148,"scoredAt":149},54,"Medium","Plan remediation","2026-10-16T06:53:17.481367+00:00"]