Summary
Security and Bug Fix(es):
* NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)
* Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051)
* VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | NetworkManager | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-adsl | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-bluetooth | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-cloud-setup | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-config-connectivity-redhat | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-config-server | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-dispatcher-routing-rules | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-initscripts-updown | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-libnm | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-libnm-devel | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-ovs | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-ppp | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-team | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-tui | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-wifi | 1:1.40.16-18.el8_10 |
| AlmaLinux · 8 | NetworkManager-wwan | 1:1.40.16-18.el8_10 |
Vulnerabilities 1
-
High 7.6CVE-2024-3661 Public exploit
DHCP routing options can manipulate interface-based VPN traffic
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …