RHEL 8 : NetworkManager-libreswan (RHSA-2024:8355)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8355 advisory. This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes:...

OPENSUSE-SU-2024:14422-1 NetworkManager-applet-libreswan-1.2.24-1.1 on GA media

These are all security issues fixed in the NetworkManager-applet-libreswan-1.2.24-1.1 package on the GA media of openSUSE Tumbleweed...

Important: NetworkManager-libreswan security update

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes: NetworkManager-libreswan: Local privilege escalation via leftupdown CVE-2024-9050 For more details about the security issues, including the impact, a CVSS score,...

RHEL 8 : NetworkManager-libreswan (RHSA-2024:8354)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8354 advisory. This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes:...

Oracle Linux 8 : NetworkManager-libreswan (ELSA-2024-8353)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8353 advisory. 1.2.10-7 - Unbreak validation of unknown keys 1.2.10-6 - Fix improper escaping of Libreswan configuration CVE-2024-9050 Tenable has extracted the preceding...

RHEL 7 : NetworkManager-libreswan (RHSA-2024:8357)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8357 advisory. This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes:...

RHEL 8 : NetworkManager-libreswan (RHSA-2024:8358)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8358 advisory. This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes:...

RHSA-2024:8338 Red Hat Security Advisory: NetworkManager-libreswan security update

Bulletin has no description...

RHSA-2024:8312 Red Hat Security Advisory: NetworkManager-libreswan security update

Bulletin has no description...

Important: Red Hat Security Advisory: NetworkManager-libreswan security update

An update for NetworkManager-libreswan is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CVE-2024-9050

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

Important: Red Hat Security Advisory: NetworkManager-libreswan security update

An update for NetworkManager-libreswan is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

CVE-2024-9050 Networkmanager-libreswan: local privilege escalation via leftupdown

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

CVE-2024-9050

The CVE-2024-9050 issue affects the libreswan NetworkManager plugin (NetworkManager-libreswan). The vulnerability arises from improper sanitization of VPN configurations by a local unprivileged user, where unescaped special characters in a key-value configuration (notably the leftupdown parameter...

CVE-2024-9050 Networkmanager-libreswan: local privilege escalation via leftupdown

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

CVE-2024-9050

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

PT-2024-7951

Name of the Vulnerable Software and Affected Versions NetworkManager-libreswan versions prior to 1.2.24 Description A flaw was found in the libreswan client plugin for NetworkManager, where it fails to properly sanitize the VPN configuration from the local unprivileged user. The plugin fails to...

RHEL 7 : NetworkManager-libreswan (RHSA-2024:8338)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8338 advisory. This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes:...

CVE-2024-9050: Improper Control of Generation of Code

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

RHEL 9 : NetworkManager-libreswan (RHSA-2024:8312)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8312 advisory. This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fixes:...