Skip to content
OpenAdvisories
High RHSA-2025:0288 1 CVE

Red Hat Security Advisory: Bug fix of NetworkManager

Published Jan 14, 2025 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 52

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-adsl-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-bluetooth-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-cloud-setup 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-cloud-setup-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-debugsource 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-libnm-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-ovs-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-ppp-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-team-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-tui-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-wifi-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream NetworkManager-wwan-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-adsl 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-adsl-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-bluetooth 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-bluetooth-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-cloud-setup-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-config-connectivity-redhat 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-config-server 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-debugsource 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-dispatcher-routing-rules 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-initscripts-updown 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-libnm 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-libnm-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-ovs 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-ovs-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-ppp 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-ppp-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-team 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-team-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-tui 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-tui-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-wifi 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-wifi-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-wwan 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos NetworkManager-wwan-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-adsl-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-bluetooth-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-cloud-setup-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-debugsource 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-libnm-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-libnm-devel 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-ovs-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-ppp-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-team-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-tui-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-wifi-debuginfo 1:1.40.16-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb NetworkManager-wwan-debuginfo 1:1.40.16-18.el8_10

Vulnerabilities 1

  • High 7.6
    CVE-2024-3661 Public exploit

    DHCP routing options can manipulate interface-based VPN traffic

    DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …

    IETF DHCP openvpn libreswan Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://issues.redhat.com/browse/RHEL-73052
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0288.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-3661
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2320141
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-3661
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-3661
  • article
    https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/
  • article
    https://bst.cisco.com/quickview/bug/CSCwk05814
  • article
    https://datatracker.ietf.org/doc/html/rfc2131#section-7
  • article
    https://datatracker.ietf.org/doc/html/rfc3442#section-7
  • article
    https://fortiguard.fortinet.com/psirt/FG-IR-24-170
  • article
    https://issuetracker.google.com/issues/263721377
  • article
    https://krebsonsecurity.com/2024/05/why-your-vpn-may-not-be-as-secure-as-it-claims/
  • article
    https://lowendtalk.com/discussion/188857/a-rogue-dhcp-server-within-your-network-can-and-will-hijack-your-vpn-traffic
  • article
    https://mullvad.net/en/blog/evaluating-the-impact-of-tunnelvision
  • article
    https://my.f5.com/manage/s/article/K000139553
  • article
    https://news.ycombinator.com/item?id=40279632
  • article
    https://news.ycombinator.com/item?id=40284111
  • article
    https://security.paloaltonetworks.com/CVE-2024-3661
  • article
    https://support.citrix.com/article/CTX677069/cloud-software-group-security-advisory-for-cve20243661
  • article
    https://tunnelvisionbug.com/
  • article
    https://www.agwa.name/blog/post/hardening_openvpn_for_def_con
  • article
    https://www.leviathansecurity.com/research/tunnelvision
  • article
    https://www.theregister.com/2024/05/07/vpn_tunnelvision_dhcp/
  • article
    https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00009
  • article
    https://www.zscaler.com/blogs/security-research/cve-2024-3661-k-tunnelvision-exposes-vpn-bypass-vulnerability