A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the NetworkManager-1.43.10-1.el9 build changelog.

  - It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and     802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this     profile, the authentication does not happen and the connection is made insecurely. (CVE-2020-10754)

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1574 advisory.

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has NetworkManager packages installed that are affected by a vulnerability:

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:1574 advisory.

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the NetworkManager package has been released.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1574 advisory.

    libnma     [1.8.30-2]
    - Rebuild with new gtk-doc to fix multilib issues (rh #1853152)

    NetworkManager     [1.30.0-7.0.1]
    - add connectivity check via Oracle servers [Orabug: 32051972]
    - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3

    [1:1.30.0-7]
    - initrd: set multi-connect=single for connections with static IP (rh #1915493)

    [1:1.30.0-6]
    - core: fix handling local routes generated by kernel (rh #1907661)
    - initrd: fix crash with rd.znet= argument (rh #1941106)
    - core: fix crash handling path match (rh #1942741)

    [1:1.30.0-5]
    - bond: restore MAC on release only when there is a cloned MAC address (rh #1933292)

    [1:1.30.0-4]
    - initrd: apply the MTU from bond= argument to the bond connection (rh #1936610)

    [1:1.30.0-3]
    - Increase LimitNOFILE to allow more than 1024 file descriptors (rh #1926599).
      This requires a suitable libndp version that can handle many file descriptors (rh #1933041).

    [1:1.30.0-2]
    - Avoid logging warning setting bond ad_actor_system (rh #1923999)

    [1:1.30.0-1]
    - Update to 1.30.0 release

    [1:1.30.0-0.10]
    - Update to 1.30-rc1 (1.29.90-dev) (development)
    - cloud-setup: fix removing IPv4 address (rh #1920838)

    [1:1.30.0-0.9]
    - Update to 1.29.11 (development)
    - bond: fix changing mode when the device is created externally (rh #1870691)
    - ovs: fix firewalld configuration for ovs-ports (rh #1921107)
    - ovs: avoid race condition when system interface is removed from ovsdb (rh #1923248)
    - doc: mention NETMASK as alternative to PREFIX for addresses in man nm-settings-ifcfg-rh (rh #1925123)

    [1:1.30.0-0.8]
    - Update to 1.29.10 (development)
    - bond: introduce new 'vlan+srcmac' xmit_hash_policy option (rh #1915457)
    - ovs: clean up interfaces from ovsdb at startup (rh #1861296)

    [1:1.30.0-0.7]
    - Update to 1.29.9 (development)
    - By default check all devices for hostname reverse DNS lookup (rh #1766944)

    [1:1.30.0-0.6]
    - Update to 1.29.8 (development)
    - initrd: accept zero-byte prefix for BOOTIF MAC address (rh #1904099)
    - core: fix bond port wrongly detached by dispather call (rh #1888348)
    - cloud-setup: add manual page (rh #1867997)
    - core: fix handling timeout for IPv6 RDNSS,DNSSL option in RA (rh #1874743)

    [1:1.30.0-0.5]
    - Update to 1.29.7 (development)
    - Add WPA3-Enterprise support (rh #1883024)

    [1:1.30.0-0.4]
    - Update to 1.29.6 (development)
    - initrd: disable ipv4 and ipv6 by default for vlan parent connection (rh #1903175)
    - initrd: fix parsing of ip= argument with dotted interface name (rh #1898294)

    [1:1.30.0-0.3]
    - Update to 1.29.3 (development)
    - Support changing external-ids of OVS bridges and interfaces (rh #1866227)
    - Add a hostname setting (rh #1766944)
    - Support creating veth interfaces (rh #1901523)
    - initrd: fix parsing of ip= arguments with empty first token (rh #1900260)

    [1:1.30.0-0.2]
    - device: fix crash in nm_device_reactivate_ip_config()
    - dns: fix crash in systemd-resolved DNS plugin (rh #1894839)

    [1:1.30.0-0.1]
    - Update to 1.29.1 (development)
    - add library for handling profiles in keyfile format (rh #1813334)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1574 advisory.

  - NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1574 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    The following packages have been upgraded to a later upstream version: NetworkManager (1.30.0).
    (BZ#1878783)

    Security Fix(es):

    * NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4914-1 advisory.

    NetworkManager could be made to crash if it received specially crafted input.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
191336	CentOS 9 : NetworkManager-1.43.10-1.el9	Nessus	CentOS Local Security Checks	medium
184490	Rocky Linux 8 : NetworkManager and libnma (RLSA-2021:1574)	Nessus	Rocky Linux Local Security Checks	medium
160796	NewStart CGSL MAIN 6.02 : NetworkManager Vulnerability (NS-SA-2022-0064)	Nessus	NewStart CGSL Local Security Checks	medium
157682	AlmaLinux 8 : NetworkManager and libnma (ALSA-2021:1574)	Nessus	Alma Linux Local Security Checks	medium
151437	Photon OS 1.0: Networkmanager PHSA-2021-1.0-0409	Nessus	PhotonOS Local Security Checks	medium
149909	Oracle Linux 8 : NetworkManager / and / libnma (ELSA-2021-1574)	Nessus	Oracle Linux Local Security Checks	medium
149775	CentOS 8 : NetworkManager and libnma (CESA-2021:1574)	Nessus	CentOS Local Security Checks	medium
149695	RHEL 8 : NetworkManager and libnma (RHSA-2021:1574)	Nessus	Red Hat Local Security Checks	medium
148554	Ubuntu 20.10 : NetworkManager vulnerability (USN-4914-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2021-20297

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium