[ GLSA 201509-05 ] NetworkManager

[GLSA]

Gentoo Linux Security Advisory

Title: NetworkManager: Denial of Service (GLSA 201509-05)
Severity: normal
Exploitable: remote
Date: September 24, 2015
Bug(s): #545980
ID: 201509-05

Synopsis

Improper handling of Router Advertisements in NetworkManager could
cause a Denial of Service condition in IPv6 network stacks.


Background

NetworkManager is an universal network configuration daemon for laptops,
desktops, servers and virtualization hosts.


Affected Packages

Package: net-misc/networkmanager
Vulnerable: < 1.0.2
Unaffected: >= 1.0.2
Architectures: All supported architectures


Description

IPv6 Neighbour Discovery ICMP broadcast containing a non-route with a
low hop limit causes a Denial of Service by lowering the hop limit on
existing IPv6 routes in NetworkManager.


Impact

A remote attacker on the same network segment could cause a Denial of
Service condition in NetworkManager


Workaround

There is no known workaround at this time.

Resolution

All NetworkManager users should upgrade to the latest version: