Lucene search
+L

1503 matches found

Amazon
Amazon
•added 2024/12/19 12:00 a.m.•18 views

Medium: NetworkManager-libreswan

Issue Overview: A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special...

7.8CVSS7.6AI score0.00457EPSS
SaveExploits0
Rosalinux
Rosalinux
•added 2024/11/26 9:07 a.m.•25 views

Advisory ROSA-SA-2024-2526

Software: NetworkManager-libreswan 1.2.4 OS: rosa-server79 packageevrstring: NetworkManager-libreswan-1.2.4-2.0.1.res7 CVE-ID: CVE-2024-9050 BDU-ID: 2024-09459 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libreswan client plugin of the NetworkManager network connection management program is...

7.8CVSS7.7AI score0.00457EPSS
SaveExploits0
osv_rhsa
osv_rhsa
•added 2024/11/21 9:56 p.m.•24 views

RHSA-2024:9556 Red Hat Security Advisory: NetworkManager-libreswan security update

Bulletin has no description...

7.8CVSS7.1AI score0.00457EPSS
SaveExploits0References9
osv_rhsa
osv_rhsa
•added 2024/11/21 9:56 p.m.•26 views

RHSA-2024:9555 Red Hat Security Advisory: NetworkManager-libreswan security update

Bulletin has no description...

7.8CVSS7.1AI score0.00457EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2024/11/19 12:00 a.m.•24 views

Oracle Linux 9 : NetworkManager (ELSA-2024-9317)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9317 advisory. 1.48.10-2.0.1 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 1:1.48.10-2 - cloud-setup: Allow...

3.1CVSS5.5AI score0.0045EPSS
SaveExploits0References2
Oracle linux
Oracle linux
•added 2024/11/18 12:00 a.m.•22 views

NetworkManager-libreswan security update

1.2.22-4 - Unbreak validation of unknown keys 1.2.22-2 - Fix improper escaping of Libreswan configuration CVE-2024-9050...

7.8CVSS7.2AI score0.00457EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•13 views

libreswan NetworkManager Privilege Escalation

The vulnerability of the client plugin libreswan in the NetworkManager network management software is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS8.1AI score0.00457EPSS
SaveExploits0References12Affected Software6
Tenable Nessus
Tenable Nessus
•added 2024/11/14 12:00 a.m.•21 views

Fedora 41 : NetworkManager-libreswan (2024-2e8944621e)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2e8944621e advisory. This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager. It fixes a local privilege escalation bug due to...

7.8CVSS7.2AI score0.00457EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/11/13 3:50 p.m.•23 views

Important: Red Hat Security Advisory: NetworkManager-libreswan security update

An update for NetworkManager-libreswan is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

7.8CVSS7.1AI score0.00457EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/11/13 3:23 p.m.•31 views

Important: Red Hat Security Advisory: NetworkManager-libreswan security update

An update for NetworkManager-libreswan is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.8CVSS7.1AI score0.00457EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/11/13 3:23 p.m.•19 views

NetworkManager-libreswan: Local privilege escalation via leftupdown

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

7.8CVSS7.5AI score0.00457EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2024/11/13 12:00 a.m.•28 views

Mageia: Security Advisory (MGASA-2024-0356)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.00457EPSS
SaveExploits0References4
osv_alsa
osv_alsa
•added 2024/11/13 12:00 a.m.•20 views

ALSA-2024:9555 Important: NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes: NetworkManager-libreswan: Local privilege escalation via leftupdown CVE-2024-9050 For more details about the security issues, including the impact, a CVSS score,...

7.8CVSS7.3AI score0.00457EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2024/11/13 12:00 a.m.•25 views

Important: NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes: NetworkManager-libreswan: Local privilege escalation via leftupdown CVE-2024-9050 For more details about the security issues, including the impact, a CVSS score,...

7.8CVSS7.3AI score0.00457EPSS
SaveExploits0References4
Mageia
Mageia
•added 2024/11/12 7:53 p.m.•30 views

Updated networkmanager-libreswan packages fix security vulnerability

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

7.8CVSS7.5AI score0.00457EPSS
SaveExploits0References2
osv_mgasa
osv_mgasa
•added 2024/11/12 7:53 p.m.•14 views

MGASA-2024-0356 Updated networkmanager-libreswan packages fix security vulnerability

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

7.8CVSS7.4AI score0.00457EPSS
SaveExploits0References3
osv_rhsa
osv_rhsa
•added 2024/11/12 2:23 p.m.•16 views

RHSA-2024:9317 Red Hat Security Advisory: NetworkManager security update

Bulletin has no description...

3.1CVSS5.1AI score0.0045EPSS
SaveExploits0References27
RedHat Linux
RedHat Linux
•added 2024/11/12 8:52 a.m.•20 views

NetworkManager: Denial of Service

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service...

3.1CVSS5.1AI score0.0045EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/11/12 8:52 a.m.•238 views

Low: Red Hat Security Advisory: NetworkManager security update

An update for NetworkManager is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

3.1CVSS5.4AI score0.0045EPSS
SaveExploits0References22
osv_alsa
osv_alsa
•added 2024/11/12 12:00 a.m.•19 views

ALSA-2024:9317 Low: NetworkManager security update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

3.1CVSS5.4AI score0.0045EPSS
SaveExploits0References4
Rows per page
Query Builder