NE
Product
Networkmanager
12
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Networkmanager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000135 | 7.5 | Mar 20 | GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local… Affected: through 1.10.2 |
| CVE-2006-7246 | 6.8 | Jan 27 | NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used Affected: 0.9.0 through 0.9.9.98 |
| CVE-2021-20297 | 5.5 | May 26 | A flaw was found in NetworkManager in versions before 1.30.0 Affected: before 1.30.0 |
| CVE-2012-1096 | 5.5 | Mar 10 | NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection Affected: through 0.9.0 |
| CVE-2012-2736 | 4.4 | Dec 26 | In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network Affected: 0.9.2.0 |
| CVE-2020-10754 | 4.3 | Jun 8 | It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile Affected: before 1.22.14; 1.24.0 before 1.24.2 |
| CVE-2015-0272 | – | Nov 17 | GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a… Affected: before 1.2.0 |
| CVE-2011-2176 | – | Sep 2 | GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions… Affected: through 0.8.4; 0.2.0; 0.3.0; 0.3.1; 0.4.1; 0.5.0; +10 more |
| CVE-2011-1943 | – | Jun 14 | The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate… Affected: before 0.8.9997 |
| CVE-2009-4145 | – | Dec 23 | nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive… Affected: 0.7.2 |
| CVE-2009-4144 | – | Dec 23 | NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a… Affected: 0.7.2 |
| CVE-2005-2410 | – | Aug 1 | Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless… Affected: before 0.4.1 |
Showing 12