Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-6501
HistoryJul 09, 2024 - 12:00 a.m.

CVE-2024-6501

2024-07-0900:00:00
ubuntu.com
ubuntu.com
1
networkmanager
denial of service
lldp

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

High

A flaw was found in NetworkManager. When a system running NetworkManager
with DEBUG logs enabled and an interface eth1 configured with LLDP enabled,
a malicious user could inject a malformed LLDP packet. NetworkManager would
crash, leading to a denial of service.

Bugs

Notes

Author Note
Priority reason: DoS only when DEBUG and LLDP are enabled

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

High