A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the NetworkManager-1.43.10-1.el9 build changelog.

  - It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and     802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this     profile, the authentication does not happen and the connection is made insecurely. (CVE-2020-10754)

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1574 advisory.

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has NetworkManager packages installed that are affected by a vulnerability:

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:1574 advisory.

  - A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile     crashes NetworkManager. The highest threat from this vulnerability is to system availability.
    (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the NetworkManager package has been released.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1574 advisory.

  - NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1574 advisory.

  - NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1574 advisory.

  - NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4914-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
191336	CentOS 9 : NetworkManager-1.43.10-1.el9	Nessus	CentOS Local Security Checks	medium
184490	Rocky Linux 8 : NetworkManager and libnma (RLSA-2021:1574)	Nessus	Rocky Linux Local Security Checks	medium
160796	NewStart CGSL MAIN 6.02 : NetworkManager Vulnerability (NS-SA-2022-0064)	Nessus	NewStart CGSL Local Security Checks	medium
157682	AlmaLinux 8 : NetworkManager and libnma (ALSA-2021:1574)	Nessus	Alma Linux Local Security Checks	medium
151437	Photon OS 1.0: Networkmanager PHSA-2021-1.0-0409	Nessus	PhotonOS Local Security Checks	medium
149909	Oracle Linux 8 : NetworkManager / and / libnma (ELSA-2021-1574)	Nessus	Oracle Linux Local Security Checks	medium
149775	CentOS 8 : NetworkManager and libnma (CESA-2021:1574)	Nessus	CentOS Local Security Checks	medium
149695	RHEL 8 : NetworkManager and libnma (RHSA-2021:1574)	Nessus	Red Hat Local Security Checks	medium
148554	Ubuntu 20.10 : NetworkManager vulnerability (USN-4914-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2021-20297

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium