CVE-2020-10754
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
4.3
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
- Record
CVE-2020-10754- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-287, CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2020-3172
4.3
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
- Record
EUVD-2020-3172- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5p6-9327-8hcq No score
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
- Record
GHSA-r5p6-9327-8hcq- Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
4.3
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
- Record
CVE-2020-10754- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-287, CWE-306
- Updated
- 2026-11-02
OSV
4.3
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
- Record
CVE-2020-10754- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-10754
4.3
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
- Record
DEBIAN-CVE-2020-10754- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2020:3011
4.3
Red Hat Security Advisory: NetworkManager security and bug fix update
- Record
RHSA-2020:3011- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2020:4003
4.3
Red Hat Security Advisory: NetworkManager security and bug fix update
- Record
RHSA-2020:4003- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2020-0260 No score
Updated networkmanager packages fix security vulnerability
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely (CVE-2020-10754).
The networkmanager package has been updated to version 1.18.8, fixing this issue and other bugs.
Also, the networkmanager-applet package has been updated to version 1.8.24. It also adds support for connecting to WPA3 / SAE protected wireless networks.
gnome-control-center and gnome-shell have been fixed to correctly identify the connections as WPA3.
- Record
MGASA-2020-0260- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10602-1 No score
NetworkManager-1.32.10-2.1 on GA media
These are all security issues fixed in the NetworkManager-1.32.10-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10602-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
network-managerDebian:12 |
before 1.24.2-1 | 1.24.2-1 |
network-managerDebian:13 |
before 1.24.2-1 | 1.24.2-1 |
network-managerDebian:14 |
before 1.24.2-1 | 1.24.2-1 |
networkmanagerMageia:7 |
before 1.18.8-1.mga7 | 1.18.8-1.mga7 |
networkmanager-appletMageia:7 |
before 1.8.24-1.mga7 | 1.8.24-1.mga7 |
gnome-control-centerMageia:7 |
before 3.32.1-2.2.mga7 | 3.32.1-2.2.mga7 |
gnome-shellMageia:7 |
before 3.32.1-2.1.mga7 | 3.32.1-2.1.mga7 |
NetworkManager-adsl-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-bluetooth-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-cloud-setupRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
Show 110 moreShow less
| Package | Affected | Fixed |
|---|---|---|
NetworkManager-cloud-setup-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-debugsourceRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-libnm-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ovs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ppp-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-team-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-tui-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wifi-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wwan-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManagerRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-adslRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-adsl-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-bluetoothRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-bluetooth-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-cloud-setup-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-config-connectivity-redhatRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-config-serverRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-debugsourceRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-dispatcher-routing-rulesRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-libnmRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-libnm-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ovsRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ovs-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-pppRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ppp-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-teamRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-team-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-tuiRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-tui-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wifiRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wifi-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wwanRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wwan-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-adsl-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-bluetooth-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-cloud-setup-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-debugsourceRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-libnm-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-libnm-develRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ovs-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-ppp-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-team-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-tui-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wifi-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManager-wwan-debuginfoRed Hat:enterprise_linux:8::crb |
before 1:1.22.8-5.el8_2 | 1:1.22.8-5.el8_2 |
NetworkManagerRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-adslRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-bluetoothRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-debuginfoRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glibRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnmRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-pppRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-teamRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-tuiRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wifiRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wwanRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-dispatcher-routing-rulesRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glib-develRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnm-develRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-ovsRed Hat:enterprise_linux:7::client |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManagerRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-adslRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-bluetoothRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glibRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnmRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-pppRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-teamRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-tuiRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wifiRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wwanRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-dispatcher-routing-rulesRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glib-develRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnm-develRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-ovsRed Hat:enterprise_linux:7::computenode |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManagerRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-adslRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-bluetoothRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-config-serverRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-debuginfoRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glibRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnmRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-pppRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-teamRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-tuiRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wifiRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wwanRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-dispatcher-routing-rulesRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glib-develRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnm-develRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-ovsRed Hat:enterprise_linux:7::server |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManagerRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-adslRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-bluetoothRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glibRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnmRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-pppRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-teamRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-tuiRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wifiRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-wwanRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-dispatcher-routing-rulesRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-glib-develRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-libnm-develRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManager-ovsRed Hat:enterprise_linux:7::workstation |
before 1:1.18.8-1.el7 | 1:1.18.8-1.el7 |
NetworkManageropenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 1.32.10-2.1 | 1.32.10-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-10754 is a medium vulnerability (CVSS 4.3) in [red Hat] Networkmanager, published June 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. Fixed in network-manager 1.24.2-1.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10754
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44FTVXWKDYIAMOOP2PZMUY3D2QNWAVBZ
nvd.nist.gov/vuln/detail/CVE-2020-10754
lists.fedoraproject.org/archives/list/[email protected]/message/44FTVXWKDYIAMOOP2PZMUY3D2QNWAVBZ
github.com/advisories/GHSA-r5p6-9327-8hcq
security-tracker.debian.org/tracker/CVE-2020-10754
Show 28 moreShow less
advisories.mageia.org/MGASA-2020-0260.html
bugs.mageia.org/show_bug.cgi?id=26713
bugs.mageia.org/show_bug.cgi?id=26673
gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/nm-1-18/NEWS
gitlab.gnome.org/GNOME/network-manager-applet/-/blob/1.8.24/NEWS
lists.fedoraproject.org/archives/list/[email protected]/thread/SI4LWYUPI7M6B24ABADK24T77VF65B4A
access.redhat.com/errata/RHSA-2020:3011
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1841041
bugzilla.redhat.com/show_bug.cgi?id=1843357
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3011.json
access.redhat.com/security/cve/CVE-2020-10754
cve.org/CVERecord?id=CVE-2020-10754
access.redhat.com/errata/RHSA-2020:4003
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1706646
bugzilla.redhat.com/show_bug.cgi?id=1737774
bugzilla.redhat.com/show_bug.cgi?id=1758550
bugzilla.redhat.com/show_bug.cgi?id=1765566
bugzilla.redhat.com/show_bug.cgi?id=1785039
bugzilla.redhat.com/show_bug.cgi?id=1797915
bugzilla.redhat.com/show_bug.cgi?id=1832170
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4003.json
suse.com/security/cve/CVE-2018-1000135
suse.com/security/cve/CVE-2018-15688
suse.com/security/cve/CVE-2020-10754
suse.com/security/cve/CVE-2020-13529
suse.com/security/cve/CVE-2021-20297