Package NetworkManager updated to version 1.18.11-alt1.gite2fdbc2b7482 for branch p9 in task 276659.

Published: 2020-08-18

BDU:2022-06889

Уязвимость подсистемы инициализации и управления службами Systemd, связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (6.1) Vector: AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

References:

CVE-2020-13529

Published: 2021-05-10
Modified: 2024-11-21

CVE-2020-13529

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

References:

Version: 2.1.0

Package NetworkManager update in p9 on 2021-07-02

ALT-PU-2021-2129-1

Closed vulnerabilities

BDU:2022-06889

CVE-2020-13529