ALT-PU-2026-17776-2

Package update NetworkManager in branch c10f2

Version1.52.2-alt2.gbb45d167f8

Published2026-10-09

Max severityMEDIUM

Severity:

Closed issues (3)

LOW3.1

Уязвимость программного обеспечения управления сетевыми соединениями NetworkManager, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2025-01-15Modified: 2026-08-31

CVSS 3.xLOW 3.1

CVSS:3.x/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

CVSS 2.0LOW 2.6

CVSS:2.0/AV:N/AC:H/Au:N/C:N/I:N/A:P

References

LOW3.1

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.

Published: 2024-07-09Modified: 2026-06-17

CVSS 3.xLOW 3.1

CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

References

MEDIUM6.7

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.

Published: 2026-06-04Modified: 2026-09-24

CVSS 3.xMEDIUM 6.7

CVSS:3.x/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

References

Closed bugs (1)

Не работает подключение к VPN (openvpn) на экране lightdm-kde-greeter