Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2020:4003
HistoryOct 20, 2020 - 6:34 p.m.

NetworkManager security update

2020-10-2018:34:41
CentOS Project
lists.centos.org
147
networkmanager
security
update
unauthenticated
vulnerability
fix
centos
cve-2020-10754

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%

JSON

CentOS Errata and Security Advisory CESA-2020:4003

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

Security Fix(es):

  • NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults (CVE-2020-10754)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2020-October/032855.html

Affected packages:
NetworkManager
NetworkManager-adsl
NetworkManager-bluetooth
NetworkManager-config-server
NetworkManager-dispatcher-routing-rules
NetworkManager-glib
NetworkManager-glib-devel
NetworkManager-libnm
NetworkManager-libnm-devel
NetworkManager-ovs
NetworkManager-ppp
NetworkManager-team
NetworkManager-tui
NetworkManager-wifi
NetworkManager-wwan

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:4003

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64networkmanager< 1.18.8-1.el7NetworkManager-1.18.8-1.el7.x86_64.rpm
CentOS7x86_64networkmanager-adsl< 1.18.8-1.el7NetworkManager-adsl-1.18.8-1.el7.x86_64.rpm
CentOS7x86_64networkmanager-bluetooth< 1.18.8-1.el7NetworkManager-bluetooth-1.18.8-1.el7.x86_64.rpm
CentOS7noarchnetworkmanager-config-server< 1.18.8-1.el7NetworkManager-config-server-1.18.8-1.el7.noarch.rpm
CentOS7noarchnetworkmanager-dispatcher-routing-rules< 1.18.8-1.el7NetworkManager-dispatcher-routing-rules-1.18.8-1.el7.noarch.rpm
CentOS7i686networkmanager-glib< 1.18.8-1.el7NetworkManager-glib-1.18.8-1.el7.i686.rpm
CentOS7x86_64networkmanager-glib< 1.18.8-1.el7NetworkManager-glib-1.18.8-1.el7.x86_64.rpm
CentOS7i686networkmanager-glib-devel< 1.18.8-1.el7NetworkManager-glib-devel-1.18.8-1.el7.i686.rpm
CentOS7x86_64networkmanager-glib-devel< 1.18.8-1.el7NetworkManager-glib-devel-1.18.8-1.el7.x86_64.rpm
CentOS7i686networkmanager-libnm< 1.18.8-1.el7NetworkManager-libnm-1.18.8-1.el7.i686.rpm
Rows per page:
1-10 of 191

Related

redhatcve 1
nessus 19
amazon 1
fedora 2
openvas 7
oraclelinux 2
cve 1
prion 1
nvd 1
redhat 3
osv 2
cvelist 1
ubuntucve 1
mageia 1
veracode 1
debiancve 1
f5 1
ibm 4
redhatcve
redhatcve
CVE-2020-10754
2020-05-29 04:55:34
nessus
nessus
CentOS 8 : NetworkManager (CESA-2020:3011)
2021-02-01 00:00:00
Scientific Linux Security Update : NetworkManager on SL7.x x86_64 (20201001)
2020-10-21 00:00:00
Oracle Linux 8 : NetworkManager (ELSA-2020-3011)
2023-09-07 00:00:00
amazon
amazon
Medium: NetworkManager
2020-10-22 17:09:00
fedora
fedora
[SECURITY] Fedora 32 Update: NetworkManager-1.22.14-1.fc32
2020-06-01 01:26:38
[SECURITY] Fedora 31 Update: NetworkManager-1.20.12-1.fc31
2020-06-14 17:11:36
openvas
openvas
Fedora: Security Advisory for NetworkManager (FEDORA-2020-3857463d30)
2020-06-07 00:00:00
Fedora: Security Advisory for NetworkManager (FEDORA-2020-ace543feff)
2020-06-23 00:00:00
Huawei EulerOS: Security Advisory for NetworkManager (EulerOS-SA-2021-1529)
2021-03-05 00:00:00
oraclelinux
oraclelinux
NetworkManager security and bug fix update
2020-10-06 00:00:00
NetworkManager security and bug fix update
2020-07-24 00:00:00
cve
cve
CVE-2020-10754
2020-06-08 18:15:10
prion
prion
Design/Logic Flaw
2020-06-08 18:15:00
nvd
nvd
CVE-2020-10754
2020-06-08 18:15:10
redhat
redhat
(RHSA-2020:3011) Moderate: NetworkManager security and bug fix update
2020-07-21 10:21:40
(RHSA-2020:4003) Moderate: NetworkManager security and bug fix update
2020-09-29 07:50:39
(RHSA-2020:3194) Important: Container-native Virtualization security, bug fix, and enhancement update
2020-07-28 18:02:45
osv
osv
CVE-2020-10754
2020-06-08 18:15:10
NetworkManager-1.32.10-2.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2020-10754
2020-06-08 17:16:26
ubuntucve
ubuntucve
CVE-2020-10754
2020-06-08 00:00:00
mageia
mageia
Updated networkmanager packages fix security vulnerability
2020-06-15 10:54:40
veracode
veracode
Insecure Authentication Controls
2020-07-22 03:39:34
debiancve
debiancve
CVE-2020-10754
2020-06-08 18:15:10
f5
f5
K000132761 : CVE-2020-10754 NetworkManager
2023-02-25 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2021-02-02 22:11:04
Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2021-01-27 00:04:50
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2022-04-15 21:36:47

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%

JSON
Related for CESA-2020:4003
redhatcve1nessus19amazon1fedora2openvas7oraclelinux2cve1prion1nvd1redhat3osv2cvelist1ubuntucve1mageia1veracode1debiancve1f51ibm4