Summary
It was discovered that NetworkManager-ssh did not properly validate extra
options in VPN connection settings. A local attacker could possibly use
this issue to escalate privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | network-manager-ssh | 1.2.6-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
References
-
report
https://ubuntu.com/security/CVE-2020-9355