CVE-2021-33833: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA).

Affected products

  • Debian Debian Linux: version 9.0 only
  • Intel Connection Manager: from 1.30, up to and including 1.39

Published 2021-06-09. Last modified 2026-06-17.