Known vulnerabilities in NetworkManager (Red Hat package)
Vendor:
Red Hat Inc.
Software:
NetworkManager (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:networkmanager_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
15
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.54.3-3.el9_8
1.54.3-2.el9
1.54.0-4.el9_7
1.54.0-3.el9_7
1.52.0-9.el9_6
1.46.0-34.el9_4
1.52.0-7.el9_6
1.52.0-5.el9_6
1.4.0-12.el7
1.48.10-5.el9_5
1.40.16-18.el8_10
1.48.10-2.el9_5
1.42.2-24.el9_2
0.8.1-9.el6_1.3
0.8.1-9.el6_1.1
1.42.2-2.el9_2
1.36.0-14.el8_6
1.36.0-13.el8_6
1.32.10-4.el8
1.30.0-7.el8
1.26.0-12.1.rhaos4.7.el8
1.12.0-6.el7
1.22.8-6.el8_2
1.22.8-5.el8_2
1.30.0-16.el8_4
1.36.0-8.el8_6
1.26.0-14.1.rhaos4.7.el8
1.18.8-1.el7
1.12.0-8.el7_6
1.8.0-9.el7
0.7.0-4.el5_3
0.3.1-5.el4
0.7.0-9.el5_4
1.0.6-27.el7
1.8.0-12.el7_4
0.8.1-113.el6
0.8.1-107.el6
0.8.1-99.el6
0.8.1-75.el6
0.8.1-66.el6
0.8.1-61.el6_4
0.8.1-43.el6
0.8.1-34.el6_3
0.8.1-33.el6
0.8.1-15.el6
0.8.1-9.el6_1
0.8.1-9.el6
0.8.1-5.el6_0
0.8.1-5.el6
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU99353 - Resource exhaustion CVE-2024-6501 |
CWE-400 | Medium | 1.48.10-2.el9_5 | 25.10.2024 |
SB2024102561 SB2024102562 SB2024111237 and 1 more |
||
| #VU94616 - Information Exposure Through Log Files CVE-2024-6104 |
CWE-532 | Low | 1.42.2-24.el9_2 | 19.07.2024 |
SB2024071927 SB2024071929 SB2024071930 and 83 more |
||
| #VU91755 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2024-3661 |
CWE-300 | Medium | 1.40.16-18.el8_10, 1.46.0-34.el9_4, 1.48.10-5.el9_5 | 11.06.2024 |
SB20240611271 SB2025011365 SB2025011657 and 7 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 1.42.2-24.el9_2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU87197 - Resource exhaustion CVE-2023-45290 |
CWE-400 | Medium | 1.42.2-24.el9_2 | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 101 more |
||
| #VU75664 - Exposure of sensitive information to an unauthorized actor CVE-2023-30861 |
CWE-200 | Medium | 1.42.2-2.el9_2 | 02.05.2023 |
SB2023050221 SB2023052227 SB2023052228 and 44 more |
||
| #VU70537 - Out-of-bounds read CVE-2022-46149 |
CWE-125 | Medium | 1.36.0-13.el8_6 | 29.12.2022 |
SB2022122902 SB2022122903 SB2023032960 and 8 more |
||
| #VU66122 - Use of Insufficiently Random Values CVE-2022-30629 |
CWE-330 | Medium | 1.36.0-8.el8_6 | 05.08.2022 |
SB2022080501 SB2022080503 SB2022081106 and 81 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 1.30.0-16.el8_4 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 1.30.0-16.el8_4 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 1.30.0-16.el8_4 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 1.30.0-16.el8_4 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU52596 - Predictable from Observable State CVE-2020-13529 |
CWE-341 | Low | 1.32.10-4.el8 | 26.04.2021 |
SB2021042643 SB2021071430 SB2021072032 and 7 more |
||
| #VU50047 - Incorrect Calculation CVE-2021-3114 |
CWE-682 | Medium | 1.26.0-14.1.rhaos4.7.el8 | 26.01.2021 |
SB2021012714 SB2021012715 SB20210120130 and 40 more |
||
| #VU34363 - Improper Authentication CVE-2020-10754 |
CWE-287 | Low | 1.18.8-1.el7, 1.22.8-5.el8_2 | 08.06.2020 |
SB2020060826 SB2020093023 SB2020072124 and 2 more |