Red Hat Security Advisory

RHSA-2024:8356

NetworkManager-libreswan security update

Released 2024-10-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) NetworkManager-libreswan-1.2.10-6.el8_6, NetworkManager-libreswan-gnome-1.2.10-6.el8_6
Red Hat Enterprise Linux AppStream E4S (v.8.6) NetworkManager-libreswan-1.2.10-6.el8_6, NetworkManager-libreswan-gnome-1.2.10-6.el8_6
Red Hat Enterprise Linux AppStream TUS (v.8.6) NetworkManager-libreswan-1.2.10-6.el8_6, NetworkManager-libreswan-gnome-1.2.10-6.el8_6

Fixes 1 record

TI-2024-08402 CVE-2024-9050

Networkmanager-libreswan: local privilege escalation via leftupdown

LOW 36

A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00457 Published 2024-10-22 Partial fix · 1.2.24, 1.2.4-4.el7_7 +10 CWE-94