Improper authorization control for web services In network-manager
Description
The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 1.0.2-1 | ||
debian 14 | 1.0.2-1 | ||
debian 12 | 1.0.2-1 | ||
debian 13 | 1.0.2-1 | ||
 rpm rhel7 | 0:1.0.6-2.el7 | ||
rpm rhel7 | 0:1.1.0-8.git20130913.el7 | ||
rpm rhel7 | 0:1.0.6-3.el7 | ||
rpm rhel7 | 1:1.0.6-27.el7 |
Aliases
1. 2. 3. 4. 5.