Security Bulletin: Vulnerabilities in NetworkManager affect PowerKVM (CVE-2015-0272,CVE-2015-2924)

Summary PowerKVM is affected by vulnerabilities in NetworkManager. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-0272 DESCRIPTION: GNOME NetworkManager is vulnerable to a denial of service. A remote attacker could exploit this vulnerability using a specially crafted M...

CentOS 7 : ModemManager / NetworkManager / NetworkManager-libreswan / network-manager-applet (CESA-2015:2315)

Updated NetworkManager packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Oracle Linux 7 : NetworkManager (ELSA-2015-2315)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2315 advisory. - device: reject hop limits that are too low CVE-2015-2924 rh 1217090 Tenable has extracted the preceding description block directly from the Oracle...

RHEL 7 : NetworkManager (RHSA-2015:2315)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2315 advisory. NetworkManager is a system network service that manages network devices and connections. It was discovered that NetworkManager would set...

CVE-2015-2924

The receivera function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message, a similar issue to CVE-2015-2922...

CVE-2015-2924

The receivera function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message, a similar issue to CVE-2015-2922...

CVE-2015-2924

CVE-2015-2924 affects NetworkManager (ND/IPv6) via receive_ra in rdisc/nm-lndp-rdisc.c, allowing remote reconfiguration of hop-limit through a small RA hop_limit value. Public references confirm the issue in NetworkManager 1.x and describe a fix in the CentOS/Red Hat advisories (upstream 1.0.6). ...

Fedora Update for NetworkManager-openconnect FEDORA-2015-7767

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for network-manager-applet FEDORA-2015-7767

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for NetworkManager-openvpn FEDORA-2015-7767

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for NetworkManager-vpnc FEDORA-2015-7767

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : NetworkManager-1.0.2-1.fc22 / NetworkManager-openconnect-1.0.2-1.fc22 / etc (2015-7767)

This is an update of NetworkManager, the VPN plugins, applet and connection editor to 1.0.2 stable release. The update includes bug fixes, feature additions, translation updates and a fix for the CVE-2015-2924 denial of service security issue with low impact. Note that Tenable Network Security ha...