Summary
[1:1.12.0-8]
- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | NetworkManager | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-adsl | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-bluetooth | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-config-server | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-dispatcher-routing-rules | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-glib | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-glib-devel | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-libnm | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-libnm-devel | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-ovs | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-ppp | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-team | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-tui | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-wifi | 1:1.12.0-8.el7_6 |
| Oracle Linux · 7 | NetworkManager-wwan | 1:1.12.0-8.el7_6 |
Vulnerabilities 1
-
High 8.8
Out-of-Bounds write in systemd-networkd dhcpv6 option handling
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.