GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade NetworkManagerUpgrade NetworkManager-glib-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-develUpgrade NetworkManager-glib | Dec 1, 2016 | Mar 4, 2009 |
| Debian | — | Upgrade network-manager-applet | Jul 30, 2024 | Mar 5, 2009 |
| Oracle_linux | — | Upgrade NetworkManager-develUpgrade NetworkManager-glibUpgrade NetworkManagerUpgrade NetworkManager-glib-develUpgrade NetworkManager-gnome | Oct 16, 2024 | Mar 5, 2009 |
| Suse | — | Upgrade NetworkManager-glibUpgrade NetworkManager-gnomeUpgrade NetworkManagerUpgrade NetworkManager-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade network-manager-gnome | Nov 8, 2024 | Mar 5, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub