ALT-PU-2015-2039-1
Package NetworkManager updated to version 1.0.8-alt1 for branch sisyphus in task 154059.
Closed vulnerabilities
Published: 2015-11-17
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-2924
The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
Severity: LOW (3.3)
References:
- FEDORA-2015-7767
- FEDORA-2015-7767
- FEDORA-2015-7623
- FEDORA-2015-7623
- [oss-security] 20150404 Re: CVE Request : IPv6 Hop limit lowering via RA messages
- [oss-security] 20150404 Re: CVE Request : IPv6 Hop limit lowering via RA messages
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- 76879
- 76879
- GLSA-201509-05
- GLSA-201509-05