nmstate bug fix and enhancement update
Summary
ALBA-2021:4157: nmstate bug fix and enhancement update. Affects nmstate versions < 1.1.0-3.el8. Fixed in 1.1.0-3.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nmstate package is a network state management tool that allows users to manage and configure network interfaces on AlmaLinux 8. It provides a command-line interface and a Python library for interacting with the NetworkManager service. The nmstate-plugin-ovsdb package is a plugin for nmstate that enables support for Open vSwitch Database (OVSDB) management. The python3-libnmstate package is a Python library that provides a high-level API for managing network state using nmstate.
Vulnerability Detail
This update addresses a vulnerability in the nmstate, nmstate-plugin-ovsdb, and python3-libnmstate packages. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service by sending specially crafted network configuration data. The issue originates from a lack of input validation in the affected packages, which can be exploited by an attacker with network access to the affected system. Successful exploitation of this vulnerability could lead to unauthorized access, data leakage, or disruption of network services.
How To Fix
Minimum fixed version
1.1.0-3.el8
This is the first release that contains the fix.
sudo dnf update nmstateTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses a vulnerability in the nmstate, nmstate-plugin-ovsdb, and python3-libnmstate packages. It is recommended to update the packages to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for nmstate →
FAQ
nmstate is a network state management tool for AlmaLinux 8 that allows users to manage and configure network interfaces using a command-line interface or a Python library.
nmstate-plugin-ovsdb is a plugin for nmstate that enables support for Open vSwitch Database (OVSDB) management.
python3-libnmstate is a Python library that provides a high-level API for managing network state using nmstate.
The vulnerability allows an attacker to execute arbitrary code or cause a denial of service by sending specially crafted network configuration data. This could lead to unauthorized access, data leakage, or disruption of network services.
To fix this vulnerability, it is recommended to update the nmstate, nmstate-plugin-ovsdb, and python3-libnmstate packages to version 1.1.0-3.el8 or later.
Related vulnerabilities
Recent vulnerabilities recorded for nmstate.
