Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 503
Alerts This Week
Warning Icon 1 503

Ubuntu 18.04 LTS USN-3807-1 Critical: NetworkManager DoS Threat

ubuntu
Calendar Grey November 5, 2018
Dist Ubuntu Esm H88
Ubuntu has released a security patch for NetworkManager vulnerabilities that may cause system crashes or denial of service. Users should update their systems promptly for protection
NetworkManager could be made to crash or run programs if it received specially crafted network traffic.

Summary

NetworkManager could be made to crash or run programs if it received

specially crafted network traffic.

Software Description:

- network-manager: Network connection manager

Details:

Felix Wilhelm discovered that the NetworkManager internal DHCPv6 client

incorrectly handled certain DHCPv6 messages. In non-default configurations

where the internal DHCP client is enabled, an attacker on the same network

could use this issue to cause NetworkManager to crash, resulting in a

denial of service, or possibly execute arbitrary code.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  network-manager                 1.12.4-1ubuntu1.1

Ubuntu 18.04 LTS:
  network-manager                 1.10.6-2ubuntu1.1

Ubuntu 16.04 LTS:
  network-manager                 1.2.6-0ubuntu0.16.04.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3807-1

CVE-2018-15688

Severity
critical
Lowest
Low
Medium
High
Critical

November 05, 2018

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.