Description
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =1.42.4-1 || =1.42.4-1+deb12u1 || =1.42.6-1 || =1.42.6-2 || =1.42.8-1 || =1.44.0-1 || =1.44.2-1 || =1.44.2-2 || =1.44.2-3 || =1.44.2-4 || =1.44.2-5 || =1.44.2-6 || =1.44.2-7 || =1.45.90-1 || =1.45.91-1 || =1.46.0-1 || =1.46.0-2 || =1.47.90-1 || =1.47.90-2 || =1.47.91-1 || =1.48.0-1 || =1.48.10-1 || =1.48.2-1 || =1.48.4-1 || =1.48.6-1 || =1.48.8-1 || =1.49.90-1 || =1.49.90-2 || =1.49.91-1 || =1.50.0-1 || =1.50.1-1 || =1.50.2-1 || =1.50.3-1 || =1.51.90-1 || =1.52.0-1 || =1.52.0-2 || =1.52.0-3 || =1.52.0-4 || =1.52.0-5 || =1.52.0-6 || =1.52.1-1 || =1.54.0-1 || =1.54.0-2 || =1.54.0-3 || =1.54.0-4 || =1.54.1-1 || =1.54.2-1 || =1.54.2-2 || =1.54.2-3 || =1.54.3-1 || =1.54.3-2 || =1.56.0-1 || =1.56.0-2 || =1.56.0-3 || =1.56.0-4 || =1.56.0-5 || =1.56.0-6 || =1.56.0-7 || =1.56.1-1 || =1.58.0-1 || =1.58.0-2 || =1.58.0-3 || =1.58.1-1 || =1.58~rc1-1 | - |
 rpm rhel8.4 | | | 1:1.30.0-19.el8_4.1 |
rpm rhel8.6 | | | 1:1.36.0-18.el8_6.1 |
rpm rhel9.6 | | | 1:1.52.0-11.el9_6.1 |
rpm rhel7 | | - | - |
debian 13 | | =1.52.1-1 || =1.54.0-1 || =1.54.0-2 || =1.54.0-3 || =1.54.0-4 || =1.54.1-1 || =1.54.2-1 || =1.54.2-2 || =1.54.2-3 || =1.54.3-1 || =1.54.3-2 || =1.56.0-1 || =1.56.0-2 || =1.56.0-3 || =1.56.0-4 || =1.56.0-5 || =1.56.0-6 || =1.56.0-7 || =1.56.1-1 || =1.58.0-1 || =1.58.0-2 || =1.58.0-3 || =1.58.1-1 || =1.58~rc1-1 | - |
debian 14 | | =1.52.1-1 || =1.54.0-1 || =1.54.0-2 || =1.54.0-3 || =1.54.0-4 || =1.54.1-1 || =1.54.2-1 || =1.54.2-2 || =1.54.2-3 || =1.54.3-1 || =1.54.3-2 || =1.56.0-1 || =1.56.0-2 || =1.56.0-3 || =1.56.0-4 || =1.56.0-5 || =1.56.0-6 || =1.56.0-7 || =1.56.1-1 || =1.58.0-1 || =1.58~rc1-1 || >=0 <1.58.0-2 | 1.58.0-2 |
rpm rhel8 | | - | - |
rpm rhel9 | | - | - |
rpm rhel6 | | - | - |
