Red Hat NetworkManager up to 1.29.x Settings denial of service

Summaryinfo

A vulnerability has been found in Red Hat NetworkManager up to 1.29.x and classified as problematic. This issue affects some unknown processing of the component Settings Handler. This manipulation causes denial of service. This vulnerability is tracked as CVE-2021-20297. No exploit exists. The affected component should be upgraded.

Detailsinfo

A vulnerability has been found in Red Hat NetworkManager up to 1.29.x and classified as problematic. Affected by this vulnerability is an unknown part of the component Settings Handler. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability.

The weakness was disclosed 05/27/2021. It is possible to read the advisory at bugzilla.redhat.com. This vulnerability is known as CVE-2021-20297. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 1.30.0 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Red Hat

Name

• NetworkManager

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion