ALBA-2021:3055 NetworkManager bug fix and enhancement update
An attacker can cause incorrect hostname setting via IPv6 DNS reverse lookup, potentially leading to information disclosure in AlmaLinux systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is ALBA-2021:3055?
ALBA-2021:3055 is a vulnerability in NetworkManager-libnm-devel, published on 10 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.
Bug Fix(es) and Enhancement(s):
- Incorrect set hostname to localhost using DNS reverse lookup of ipv6 address (BZ#1970398)
Which versions are affected by ALBA-2021:3055?
Linux distribution packages (1)
NetworkManager-libnm-devel AlmaLinux:8 | All versions | 1:1.30.0-10.el8_4 |
How do I fix ALBA-2021:3055?
Apply the vendor's patch.
Is ALBA-2021:3055 being exploited?
There is no known exploitation of ALBA-2021:3055 in the wild and no public exploit code.