PatchTheCVEnetworkmanager vulnerabilities and fixes
Recent CVEs affecting networkmanager, with upgrade or downgrade steps. 8 tracked.
networkmanager has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2021-05-26. Highest priority: CVE-2018-1000135 (score 56/100).
- CVE-2021-20297 MEDIUM 5.5 UPGRADE DOWNGRADE A flaw was found in NetworkManager in versions before 1.30.0
- CVE-2020-10754 MEDIUM 4.3 UPGRADE MITIGATE It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.p
- CVE-2018-1000135 HIGH 7.5 UPGRADE MITIGATE GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS
- CVE-2016-0764 MEDIUM 6.2 UPGRADE Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Ent
- CVE-2015-2924 LOW 3.3 UPGRADE The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the
- CVE-2015-0272 MEDIUM 5.0 UPGRADE DOWNGRADE GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a craf
- CVE-2012-2736 MEDIUM 4.4 DOWNGRADE MITIGATE In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it cr
- CVE-2012-1096 MEDIUM 5.5 UPGRADE MITIGATE NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making
FAQ
How do I fix networkmanager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is networkmanager being exploited right now?
None of the tracked networkmanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which networkmanager CVE should I patch first?
CVE-2018-1000135 currently ranks highest (56/100): GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS.