Security controls bypass or absence In NetworkManager
Description
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic expected to be protected by the VPN.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | - | - | |
rpm rhel9 | 1:1.48.10-5.el9_5 | ||
rpm rhel8 | 1:1.40.16-18.el8_10 | ||
rpm rhel9.4 | 1:1.46.0-34.el9_4 | ||
rpm rhel6 | - | - |
Aliases
1. 2. 3.
References
1.