CVE-2024-6501: A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a…

PriorityP410low3.1CVSS 3.1

AVNACHPRNUIRSUCNINAL

EPSS

0.45%

35.7th percentile

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	network-manager	< network-manager 1.42.4-1+deb12u1 (bookworm)	network-manager 1.42.4-1+deb12u1 (bookworm)
network-manager_project	network-manager	>= 0 < 1.42.4-1+deb12u1	1.42.4-1+deb12u1
network-manager_project	network-manager	>= 0 < 1.49.90-2	1.49.90-2
network-manager_project	network-manager	>= 0 < 1.49.90-2	1.49.90-2

CVSS provenance

nvdv3.13.1LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

osv3.1LOW

vendor_debian3.1LOW

vendor_redhat3.1LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.