cbcvebase.
CVE-2021-20297
published 2021-05-26

CVE-2021-20297: A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this…

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.

Affected

10 ranges
VendorProductVersion rangeFixed in
debiannetwork-manager< network-manager 1.30.0-2 (bookworm)network-manager 1.30.0-2 (bookworm)
fedoraprojectfedora
gnomenetworkmanager< 1.30.01.30.0
gnomenetworkmanager
network-manager_projectnetwork-manager>= 0 < 1.30.0-21.30.0-2
network-manager_projectnetwork-manager>= 0 < 1.30.0-21.30.0-2
network-manager_projectnetwork-manager>= 0 < 1.30.0-21.30.0-2
network-manager_projectnetwork-manager>= 0 < 1.30.0-21.30.0-2
redhatenterprise_linux
redhatopenshift_container_platform

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM