ConnMan Memory Leak Vulnerability in DNS Proxy Component

A memory leak vulnerability has been identified in ConnMan versions through 1.44. The issue arises in the DNS proxy component, specifically within the 'parse_rr' function of 'dnsproxy.c'. The vulnerability is caused by a 'memcpy' operation that relies on the Resource Record (RR) RDLENGTH value, without properly verifying whether the data being copied exceeds the maximum allowed packet size. This oversight can lead to the unintentional transmission of stack memory contents over the network.

Impact

Exploitation of this vulnerability causes a memory leak, where sensitive stack memory data may be exposed over the network.