Skip to content
OpenAdvisories
High USN-3807-1 1 CVE

network-manager vulnerability

Published Nov 5, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Felix Wilhelm discovered that the NetworkManager internal DHCPv6 client
incorrectly handled certain DHCPv6 messages. In non-default configurations
where the internal DHCP client is enabled, an attacker on the same network
could use this issue to cause NetworkManager to crash, resulting in a
denial of service, or possibly execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS network-manager 1.2.6-0ubuntu0.16.04.3
Ubuntu · 18.04 LTS 18.04:LTS network-manager 1.10.6-2ubuntu1.1

Vulnerabilities 1

  • High 8.8
    CVE-2018-15688

    Out-of-Bounds write in systemd-networkd dhcpv6 option handling

    A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

    systemd systemd systemd systemd Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-15688