Moderate Security Vulnerability in NetworkManager: Routes Not Deleted on Reapply
Summary
ALSA-2025:0377: Moderate: Security and bug fixes for NetworkManager. Affects NetworkManager versions < 1:1.48.10-5.el9_5. Fixed in 1:1.48.10-5.el9_5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
NetworkManager is a vital system network service that manages various network devices and connections, ensuring active network connectivity. It supports Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, and integrates with multiple VPN services. This functionality is crucial for maintaining seamless network operations in diverse environments.
Vulnerability Detail
The vulnerability arises from improper handling of routing tables in NetworkManager. Specifically, routes in tables different from the main one are not deleted when reapplying configurations, leading to potential security risks. Additionally, the routing table may not store routes to VPN servers specified by ipv4.route-table, and VPN connections do not support ipv4.routing-rules settings. The critical CVE-2024-3661 allows DHCP routing options to manipulate interface-based VPN traffic, posing a significant threat to network integrity.
How To Fix
Minimum fixed version
1:1.48.10-5.el9_5
This is the first release that contains the fix.
sudo dnf update NetworkManagerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in NetworkManager poses moderate security risks, particularly concerning routing and VPN traffic management. It is essential to update to the latest patched version to ensure network integrity and security. Regular monitoring using tools like Vulert can help in identifying and addressing such vulnerabilities promptly.
See every vulnerability recorded for NetworkManager →
FAQ
The vulnerability can lead to unauthorized manipulation of VPN traffic and improper routing, potentially compromising network security.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, a patch is available in version 1:1.48.10-5.el9_5 of NetworkManager and its related packages.
While no specific workaround is available, it is crucial to prioritize updating the affected packages as soon as possible to mitigate risks.
The vulnerability allows DHCP routing options to manipulate VPN traffic, which can lead to unauthorized access or data leakage.
Related vulnerabilities
Recent vulnerabilities recorded for NetworkManager.
