Red Hat Security Advisory

RHSA-2024:8338

NetworkManager-libreswan security update

Released 2024-10-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.7) NetworkManager-libreswan-1.2.4-4.el7_7, NetworkManager-libreswan-gnome-1.2.4-4.el7_7

Fixes 1 record

TI-2024-08402 CVE-2024-9050

Networkmanager-libreswan: local privilege escalation via leftupdown

LOW 36

A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00457 Published 2024-10-22 Partial fix · 1.2.24, 1.2.4-4.el7_7 +10 CWE-94