GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade NetworkManager-gnomeUpgrade NetworkManager-develUpgrade NetworkManager-glibUpgrade NetworkManagerUpgrade NetworkManager-glib-devel | Dec 1, 2016 | Mar 4, 2009 |
| Debian | — | Upgrade network-manager-applet | Jul 30, 2024 | Mar 5, 2009 |
| Oracle_linux | — | Upgrade NetworkManager-gnomeUpgrade NetworkManager-glib-develUpgrade NetworkManager-glibUpgrade NetworkManagerUpgrade NetworkManager-devel | Oct 16, 2024 | Mar 5, 2009 |
| Suse | — | Upgrade NetworkManagerUpgrade NetworkManager-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-glib | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade network-manager-gnome | Nov 8, 2024 | Mar 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub