Red Hat Security AdvisoryRHSA-2015:2315
NetworkManager security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, NetworkManager-1:1.0.6-27.el7 +13
- Red Hat Enterprise Linux Client Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-devel-1.1.0-8.git20130913.el7, ModemManager-glib-devel-1.1.0-8.git20130913.el7 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, NetworkManager-1:1.0.6-27.el7 +11
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-devel-1.1.0-8.git20130913.el7, ModemManager-glib-devel-1.1.0-8.git20130913.el7 +8
- Red Hat Enterprise Linux Server (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7.ppc +18
- Red Hat Enterprise Linux Server Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-1.1.0-8.git20130913.el7.ppc, ModemManager-devel-1.1.0-8.git20130913.el7 +15
- Red Hat Enterprise Linux Workstation (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, NetworkManager-1:1.0.6-27.el7 +13
- Red Hat Enterprise Linux Workstation Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-devel-1.1.0-8.git20130913.el7, ModemManager-glib-devel-1.1.0-8.git20130913.el7 +8
Fixes 2 records
Priority LOW 31
GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04862 · Published 2015-11-17 · Fixed
Priority LOW 18
The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_l…
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.01204 · Published 2015-11-16 · Fixed CWE-20