CVE-2024-6501CWE-400
Networkmanager: denial of service
Low · published July 9, 2024
What it is
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
The record
Technical detail
- CVSS v3.1
- 3.1 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00450 · 38.1th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2024-07-09T19:27Z
EPSS history
Timeline