A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-ovsUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-tuiUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-teamUpgrade NetworkManager-wwanUpgrade NetworkManager-libnm-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-pppUpgrade NetworkManager-cloud-setupUpgrade NetworkManagerUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-adsl | Nov 19, 2024 | Jul 9, 2024 |
| Debian | — | Upgrade network-manager | May 15, 2025 | Jul 9, 2024 |
| Oracle_linux | — | Upgrade NetworkManager-libnm-develUpgrade NetworkManager-wifiUpgrade NetworkManager-wwanUpgrade NetworkManager-config-serverUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-teamUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-pppUpgrade NetworkManagerUpgrade NetworkManager-ovsUpgrade NetworkManager-tuiUpgrade NetworkManager-config-connectivity-oracleUpgrade NetworkManager-adsl | Nov 21, 2024 | Jul 4, 2024 |
| Redhat_linux | — | No solution existsUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-ovsUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-bluetoothUpgrade NetworkManager-teamUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-libnmUpgrade NetworkManager-wwanUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-config-serverUpgrade NetworkManagerUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-wifi | Nov 13, 2024 | Jul 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub