CVE-2012-2322: Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote a...

Security readout for executives and security teams

ConnMan versions before 0.85 can be crashed by a malformed DHCP packet because of an integer overflow in DHCPv6 option parsing. The known impact is denial of service, not code execution. The practical concern is unstable network connectivity on systems that use ConnMan and accept DHCPv6 traffic from untrusted networks. Exposure is most likely on Linux or embedded systems running ConnMan before 0.85 with DHCPv6 enabled on networks where an attacker can send DHCP packets. The source bundle does not identify downstream products beyond ConnMan. Treat as a targeted availability risk for legacy or embedded ConnMan deployments. Prioritize internet-edge, field, kiosk, appliance, and unmanaged-network use cases first. It is not currently supported by the supplied evidence as an active exploitation emergency. Mitigation focus: Upgrade ConnMan to 0.85 or a vendor-maintained fixed package.; Check distribution advisories for backported fixes before relying on version strings.; Limit exposure to untrusted DHCPv6 networks where operationally feasible..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.