CVE-2024-6501 — Uncontrolled Resource Consumption in Project Network-manager

CWE-400 — Uncontrolled Resource Consumption6 documents6 sources
Severity
3.1LOWNVD
EPSS
0.1%
top 75.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Network-manager Project Network-manager
Timeline
PublishedJul 9

Description

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.6 | Impact: 1.4

Affected Packages1 packages

▶Debiannetwork-manager_project/network-manager< 1.42.4-1+deb12u1+2

🔴Vulnerability Details

3
GHSA
GHSA-gwgm-rhr4-mf4h: A flaw was found in NetworkManager↗2024-07-09
▶
CVEList
Networkmanager: denial of service↗2024-07-09
▶
OSV
CVE-2024-6501: A flaw was found in NetworkManager↗2024-07-09
▶

📋Vendor Advisories

2
Red Hat
NetworkManager: Denial of Service↗2024-07-04
▶
Debian
CVE-2024-6501: network-manager - A flaw was found in NetworkManager. When a system running NetworkManager with DE...↗2024
▶
CVE-2024-6501 — Uncontrolled Resource Consumption | cvebase