Skip to content
OpenAdvisories
Unscored CVE-2021-20297 EUVD-2021-7722GHSA-c9hx-hg53-g52p

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highe…

Published May 26, 2021 · Updated Aug 3, 2024 · Assigned by redhat

Description

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.

Affected products

VendorProductAffectedFixed
— NetworkManager NetworkManager 1.30.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 network-manager 1.30.0-2 —
Debian 13 network-manager 1.30.0-2 —
Debian 12 network-manager 1.30.0-2 —
ReleasePackageFixed inAdvisory
RHEL 8 NetworkManager +14 1:1.30.0-7.el8 RHSA-2021:1574
RHEL 8 libnma +1 1.8.30-2.el8 RHSA-2021:1574

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 NetworkManager-libnm-devel 1:1.30.0-7.el8 ALSA-2021:1574
AlmaLinux 8 libnma-devel 1.8.30-2.el8 ALSA-2021:1574

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 NetworkManager 1:1.30.0-7.el8 RLSA-2021:1574
Rocky Linux 8 libnma 1.8.30-2.el8 RLSA-2021:1574
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed NetworkManager 1.32.10-2.1 openSUSE-SU-2024:10602-1
ReleasePackageFixed inAdvisory
Alpine v3.13 networkmanager +1 1.26.6-r1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 NetworkManager +14 1:1.30.0-7.0.1.el8 ELSA-2021-1574
Oracle Linux 8 libnma +1 1.8.30-2.el8 ELSA-2021-1574

Advisories 5

References