The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0377 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security and bug fix(es):

    * Routes in table different to main are not deleted on reapply [rhel-9.5.z] (JIRA:RHEL-73013)
    * Route to VPN server not stored in routing table that is specified by ipv4.route-table [rhel-9.5.z]     (JIRA:RHEL-73166)
    * VPN connections do not support ipv4.routing-rules settings [rhel-9.5.z] (JIRA:RHEL-73167)
    * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic     [rhel-9.5.z] (JIRA:RHEL-64726)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : Security and bug fixes for NetworkManager (Moderate) (RHSA-2025:0377)

low Nessus Plugin ID 214280

Version 1.3

Version 1.1

Version 1.3 Jul 3, 2025, 2:31 PM Plugin metadata (fix typo in plugin name) Plugin Feed: 202507031431
Version 1.1 Jan 16, 2025, 9:41 PM New Plugin Feed: 202501162141