Upstream information

CVE-2024-3661 at MITRE

Description

DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v3 Scores
  CNA (9119a7d8-5eab-497f-8521-727c672e3725) National Vulnerability Database
Base Score 7.6 7.6
Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack Vector Adjacent Network Adjacent Network
Attack Complexity Low Low
Privileges Required None None
User Interaction None None
Scope Unchanged Unchanged
Confidentiality Impact High High
Integrity Impact Low Low
Availability Impact Low Low
CVSSv3 Version 3.1 3.1
SUSE Bugzilla entry: 1224052 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Liberty Linux 8
  • NetworkManager >= 1.40.16-18.el8_10
  • NetworkManager-adsl >= 1.40.16-18.el8_10
  • NetworkManager-bluetooth >= 1.40.16-18.el8_10
  • NetworkManager-cloud-setup >= 1.40.16-18.el8_10
  • NetworkManager-config-connectivity-suse >= 1.40.16-18.el8_10
  • NetworkManager-config-server >= 1.40.16-18.el8_10
  • NetworkManager-dispatcher-routing-rules >= 1.40.16-18.el8_10
  • NetworkManager-initscripts-updown >= 1.40.16-18.el8_10
  • NetworkManager-libnm >= 1.40.16-18.el8_10
  • NetworkManager-libnm-devel >= 1.40.16-18.el8_10
  • NetworkManager-ovs >= 1.40.16-18.el8_10
  • NetworkManager-ppp >= 1.40.16-18.el8_10
  • NetworkManager-team >= 1.40.16-18.el8_10
  • NetworkManager-tui >= 1.40.16-18.el8_10
  • NetworkManager-wifi >= 1.40.16-18.el8_10
  • NetworkManager-wwan >= 1.40.16-18.el8_10
 Patchnames:
RHSA-2025:0288
SUSE Liberty Linux 9
  • NetworkManager >= 1.48.10-5.el9_5
  • NetworkManager-adsl >= 1.48.10-5.el9_5
  • NetworkManager-bluetooth >= 1.48.10-5.el9_5
  • NetworkManager-cloud-setup >= 1.48.10-5.el9_5
  • NetworkManager-config-connectivity-suse >= 1.48.10-5.el9_5
  • NetworkManager-config-server >= 1.48.10-5.el9_5
  • NetworkManager-dispatcher-routing-rules >= 1.48.10-5.el9_5
  • NetworkManager-initscripts-updown >= 1.48.10-5.el9_5
  • NetworkManager-libnm >= 1.48.10-5.el9_5
  • NetworkManager-libnm-devel >= 1.48.10-5.el9_5
  • NetworkManager-ovs >= 1.48.10-5.el9_5
  • NetworkManager-ppp >= 1.48.10-5.el9_5
  • NetworkManager-team >= 1.48.10-5.el9_5
  • NetworkManager-tui >= 1.48.10-5.el9_5
  • NetworkManager-wifi >= 1.48.10-5.el9_5
  • NetworkManager-wwan >= 1.48.10-5.el9_5
 Patchnames:
RHSA-2025:0377

SUSE Timeline for this CVE

CVE page created: Mon May 6 22:00:19 2024
CVE page last modified: Tue Jan 21 19:50:26 2025