Networkmanager: denial of service
Published Jul 9, 2024
3.1
LOWCVSS 3.1
EPSS 0.45%
Description
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
Affected products
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | affected |
| |||
| Red Hat | Red Hat OpenShift Container Platform 4 | affected |
|
No data.
No data.
Red Hat Enterprise Linux 9
NetworkManager-1:1.48.10-2.el9_5
Fixed · RHSA-2024:9317
Red Hat Enterprise Linux 9
NetworkManager-1:1.48.10-2.el9_5
Fixed · RHSA-2024:9317
Red Hat Enterprise Linux 6
NetworkManager
Not affected
Red Hat Enterprise Linux 7
NetworkManager
Not affected
Red Hat Enterprise Linux 8
NetworkManager
Affected
Red Hat OpenShift Container Platform 4
NetworkManager
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 9 | NetworkManager-1:1.48.10-2.el9_5 | Fixed | RHSA-2024:9317 |
| Red Hat Enterprise Linux 9 | NetworkManager-1:1.48.10-2.el9_5 | Fixed | RHSA-2024:9317 |
| Red Hat Enterprise Linux 6 | NetworkManager | Not affected | n/a |
| Red Hat Enterprise Linux 7 | NetworkManager | Not affected | n/a |
| Red Hat Enterprise Linux 8 | NetworkManager | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | NetworkManager | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
The impact is set to Low as it is very unlikely to have a production system running NetworkManager with DEBUG logs enabled.
References (6)
- https://access.redhat.com/errata/RHSA-2024:9317 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-6501 vdb-entryx_refsource_REDHATVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295734 issue-trackingx_refsource_REDHATIssue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48009 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6501
- https://www.cve.org/CVERecord?id=CVE-2024-6501
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2024:9317 | vendor-advisoryx_refsource_REDHAT | |
| https://access.redhat.com/security/cve/CVE-2024-6501 | vdb-entryx_refsource_REDHATVendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2295734 | issue-trackingx_refsource_REDHATIssue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48009 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2024-6501 | ||
| https://www.cve.org/CVERecord?id=CVE-2024-6501 |
Change history (0)
No recorded changes yet.