TI-2015-00239 Aliases CVE-2015-0272 GHSA-h8v5-955j-7j67

GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic…

LOW 31Published 2015-11-17 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · Partial
Fix status: Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.

Why it matters now

EPSS 0.04862 92nd percentileScored 2026-11-07

Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPE	Versions	Role	Vendor
cpe:2.3:a:gnome:networkmanager::::::::	before 1.2.0	Vulnerable	GNOME
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2::::::	11 sp2	Vulnerable	SUSE
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3::::::	11 sp3	Vulnerable	SUSE
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4::::::	11 sp4	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::	11 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4::::::	11 sp4	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:12:-::::::	12	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1::::::	12 sp1	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3::::::	11 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp4::::::	11 sp4	Vulnerable	SUSE

cpe:2.3:a:gnome:networkmanager:*:*:*:*:*:*:*:* Versions before 1.2.0 Vulnerable ·GNOME
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:* Versions 11 sp2 Vulnerable ·SUSE
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE

Show 15 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:suse:linux_enterprise_server:11:-::::::	11	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:::ltss:::*	11 sp2	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::*	11 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::*	11 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp4::::::	11 sp4	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:12:-::::::	12	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp1::::::	12 sp1	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3::::::	11 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4::::::	11 sp4	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-::::::	12	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1::::::	12 sp1	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:::::::*	12	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1::::::	12 sp1	Vulnerable	SUSE
cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::	12.04	Vulnerable	Canonical
cpe:2.3:o:oracle:linux:7:-::::::	7	Vulnerable	Oracle

cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* Versions 11 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:* Versions 11 sp2 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:* Versions 11 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:* Versions 11 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* Versions 12.04 Vulnerable ·Canonical
cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* Versions 7 Vulnerable ·Oracle

Remediation

Red Hat 1 advisory

RHSA-2015:2315 Released 2015-11-19 · Red Hat rating Moderate
NetworkManager security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, NetworkManager-1:1.0.6-27.el7 +13
- Red Hat Enterprise Linux Client Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-devel-1.1.0-8.git20130913.el7, ModemManager-glib-devel-1.1.0-8.git20130913.el7 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, NetworkManager-1:1.0.6-27.el7 +11
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-devel-1.1.0-8.git20130913.el7, ModemManager-glib-devel-1.1.0-8.git20130913.el7 +8
- Red Hat Enterprise Linux Server (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7.ppc +18
- Red Hat Enterprise Linux Server Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-1.1.0-8.git20130913.el7.ppc, ModemManager-devel-1.1.0-8.git20130913.el7 +15
- Red Hat Enterprise Linux Workstation (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-glib-1.1.0-8.git20130913.el7, NetworkManager-1:1.0.6-27.el7 +13
- Red Hat Enterprise Linux Workstation Optional (v. 7) ModemManager-1.1.0-8.git20130913.el7, ModemManager-devel-1.1.0-8.git20130913.el7, ModemManager-glib-devel-1.1.0-8.git20130913.el7 +8

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux Client (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux Client Optional (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux ComputeNode (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux ComputeNode Optional (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux Server Optional (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2015:2315
Red Hat Enterprise Linux Workstation Optional (v. 7)	Fixed	RHSA-2015:2315

Not affected: 2 products

Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 6

Timeline

2026-10-02 Threatist record created from CVE-2015-0272
2026-10-03 Alias added: GHSA-h8v5-955j-7j67

References

Patch 1

http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d5fc88e573fa58b93034b04d35a2454f5d28cad9

Advisory 10

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences