The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Nov 16, 2015 |
| Gentoo Linux | — | Upgrade net-misc/networkmanager. | Oct 30, 2017 | Nov 16, 2015 |
| Oracle_linux | — | Upgrade libnm-gtkUpgrade network-manager-appletUpgrade NetworkManager-config-serverUpgrade NetworkManager-libreswan-gnomeUpgrade ModemManager-glibUpgrade NetworkManagerUpgrade NetworkManager-bluetoothUpgrade ModemManagerUpgrade NetworkManager-wifiUpgrade NetworkManager-glib-develUpgrade NetworkManager-adslUpgrade NetworkManager-develUpgrade NetworkManager-teamUpgrade ModemManager-valaUpgrade nm-connection-editorUpgrade NetworkManager-config-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-libnmUpgrade NetworkManager-libreswanUpgrade NetworkManager-glibUpgrade libnm-gtk-develUpgrade ModemManager-develUpgrade ModemManager-glib-develUpgrade NetworkManager-tuiUpgrade NetworkManager-libnm-devel | Oct 16, 2024 | Nov 16, 2015 |
| Suse | — | Upgrade typelib-1_0-NetworkManager-1_0Upgrade libnm-glib-vpn1Upgrade NetworkManager-develUpgrade typelib-1_0-NM-1_0Upgrade NetworkManager-langUpgrade libnm0Upgrade libnm-glib4Upgrade libnm-util2Upgrade typelib-1_0-NMClient-1_0Upgrade NetworkManager | Dec 9, 2016 | Nov 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub