{"id":"CVE-2024-9050","aliases":["ALSA-2024:8353","ALSA-2024:9555","CLSA-2025-1763419211","EUVD-2024-50427","MGASA-2024-0356","OESA-2024-2331","RHSA-2024:8312","RHSA-2024:8338","RHSA-2024:8352","RHSA-2024:8353","RHSA-2024:8354","RHSA-2024:8355","RHSA-2024:8356","RHSA-2024:8357","RHSA-2024:8358","RHSA-2024:9555","RHSA-2024:9556","RLSA-2024:8353","RLSA-2024:9555","openSUSE-SU-2024:14422-1"],"status":"published","title":"Networkmanager-libreswan: local privilege escalation via leftupdown","description":"A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine by creating a malicious configuration.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00457,"percentile":0.39926,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2024-10-22T12:14:31Z","modified":"2026-11-04T21:27:41Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"NetworkManager-libreswan","fixed_in":["1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"NetworkManager-libreswan-gnome","fixed_in":["1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"NetworkManager-libreswan","fixed_in":["1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"NetworkManager-libreswan-gnome","fixed_in":["1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"NetworkManager-libreswan","fixed_in":["1.2.14-1.el9.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"NetworkManager-libreswan-gnome","fixed_in":["1.2.14-1.el9.3.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"networkmanager-libreswan","fixed_in":["1.2.24-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"NetworkManager-libreswan","fixed_in":["1.2.24-1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"NetworkManager-libreswan","fixed_in":["1.2.24-1.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"NetworkManager-libreswan","fixed_in":["1.2.24-1.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"NetworkManager-libreswan","fixed_in":["1.2.24-1.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"NetworkManager-libreswan","fixed_in":["1.2.24-1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.14-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.14-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.14-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.14-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.14-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"NetworkManager-libreswan","fixed_in":["0:1.2.4-4.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.4-4.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.4-4.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.14-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.14-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.14-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.14-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.14-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"NetworkManager-libreswan","fixed_in":["0:1.2.4-4.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.4-4.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.4-4.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-6.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.10-6.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.10-6.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.10-6.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.10-6.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan","fixed_in":["0:1.2.18-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-debuginfo","fixed_in":["0:1.2.18-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-debugsource","fixed_in":["0:1.2.18-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-gnome","fixed_in":["0:1.2.18-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","fixed_in":["0:1.2.18-6.el9_4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"NetworkManager-libreswan","fixed_in":["0:1.2.10-7.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"NetworkManager-libreswan","fixed_in":["0:1.2.22-4.el9_5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"NetworkManager-libreswan","fixed_in":["1.2.24-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.14-1.el9.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.14-1.el9.3.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"networkmanager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-4.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-4.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-4.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-4.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-4.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-4.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-6.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.18-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.18-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.18-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.18-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"NetworkManager-libreswan-gnome-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.18-6.el9_4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-7.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.22-4.el9_5"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"NetworkManager-libreswan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.24-1.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 7.7 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:8312","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8338","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8352","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8353","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8354","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8355","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8356","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8357","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8358","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9555","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9556","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-9050","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313828","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/NetworkManager-libreswan/-/commit/dcf8acfb25bd31e4b8cbd20c229da660238b5c1b","tags":["fix","article"]},{"url":"https://www.openwall.com/lists/oss-security/2024/10/25/1","tags":["web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/10/25/1","tags":["web"]},{"url":"https://bugzilla.redhat.com/2313828","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-8353.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9555.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763419211.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9050.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9050","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/NetworkManager-libreswan/","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2024-0356.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33709","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2331","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8312.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-9050","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8338.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8352.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8353.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8354.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8355.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8356.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8357.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8358.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9555.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9556.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:8353","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9555","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CEIZP2JFDFLF4SCP5AM7FOG6C2LBQOEA/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9050","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-9050","title":"Networkmanager-libreswan: local privilege escalation via leftupdown","description":"A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine by creating a malicious configuration.","status":"published","published":"2024-10-22T12:14:31.701Z","modified":"2026-11-04T21:27:41.294Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2024-50427","description":"A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine by creating a malicious configuration.","status":"published","published":"2024-10-22T12:14:31Z","modified":"2026-11-04T21:27:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T22:46:32.144626Z"}],"nvd":[{"id":"CVE-2024-9050","description":"A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine by creating a malicious configuration.","status":"published","published":"2024-10-22T13:15:02.41Z","modified":"2026-11-04T22:17:23.463Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-04T23:43:36.946093Z"}],"osv":[{"id":"CVE-2024-9050","title":"Networkmanager-libreswan: local privilege escalation via leftupdown","description":"A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine by creating a malicious configuration.","status":"published","published":"2024-10-22T12:14:31.701Z","modified":"2026-11-06T01:21:26.972202749Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-06T02:03:53.554046Z"},{"id":"OESA-2024-2331","title":"NetworkManager-libreswan security update","description":"This package provides easy connections to IPsec VPNs using NetworkManager and Libreswan.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system\u0026apos;s network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine.(CVE-2024-9050)","status":"published","published":"2024-11-01T11:07:48Z","modified":"2026-08-18T01:17:36.544802582Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:8312","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-22T23:01:30Z","modified":"2026-06-26T12:22:33.002690123Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8338","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-22T23:01:44Z","modified":"2026-06-26T12:21:20.73840915Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8352","title":"Red Hat Security Advisory: NetworkManager-libreswan:1.2.14 security update","status":"published","published":"2024-10-23T22:52:42Z","modified":"2026-06-26T12:21:20.771128389Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8353","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-23T22:52:22Z","modified":"2026-06-26T12:22:33.135872702Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8354","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-23T22:51:39Z","modified":"2026-06-26T12:22:33.128945835Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8355","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-23T22:52:01Z","modified":"2026-06-26T12:22:33.007305244Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8356","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-23T13:13:09Z","modified":"2026-06-26T12:22:33.021082533Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8357","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-23T13:12:48Z","modified":"2026-06-26T12:22:33.123914703Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8358","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-10-23T13:12:37Z","modified":"2026-06-26T12:21:20.889835732Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9555","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-11-21T21:56:15Z","modified":"2026-06-26T12:22:39.69581448Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9556","title":"Red Hat Security Advisory: NetworkManager-libreswan security update","status":"published","published":"2024-11-21T21:56:25Z","modified":"2026-06-26T12:22:23.81708701Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RLSA-2024:8353","title":"Important: NetworkManager-libreswan security update","description":"This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop\n\nSecurity Fix(es):\n\n* NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:48.666792Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"ALSA-2024:8353","title":"Important: NetworkManager-libreswan security update","description":"This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop\n\nSecurity Fix(es):\n\n* NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-10-23T00:00:00Z","modified":"2026-10-29T11:02:28.131634164Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9555","title":"Important: NetworkManager-libreswan security update","description":"This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop  \n\nSecurity Fix(es):  \n\n  * NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-13T00:00:00Z","modified":"2026-10-29T11:31:52.907346932Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CLSA-2025-1763419211","title":"NetworkManager-libreswan: Fix of CVE-2024-9050","description":"- CVE-2024-9050: sanitize VPN configuration input to prevent local privilege\n  escalation via malicious 'leftupdown' key value","status":"published","published":"2025-11-17T22:40:15Z","modified":"2026-06-01T00:31:26.879624838Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"MGASA-2024-0356","title":"Updated networkmanager-libreswan packages fix security vulnerability","description":"A flaw was found in the libreswan client plugin for NetworkManager\n(NetkworkManager-libreswan), where it fails to properly sanitize the VPN\nconfiguration from the local unprivileged user. In this configuration,\ncomposed by a key-value format, the plugin fails to escape special\ncharacters, leading the application to interpret values as keys. One of\nthe most critical parameters that could be abused by a malicious user is\nthe \"leftupdown\" key. This key takes an executable command as a value and\nis used to specify what executes as a callback in\nNetworkManager-libreswan to retrieve configuration settings back to\nNetworkManager. As NetworkManager uses Polkit to allow an unprivileged\nuser to control the system's network configuration, a malicious actor\ncould achieve local privilege escalation and potential code execution as\nroot in the targeted machine by creating a malicious configuration.\n(CVE-2024-9050)\n","status":"published","published":"2024-11-12T19:53:59Z","modified":"2026-04-16T04:40:58.30529924Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14422-1","title":"NetworkManager-applet-libreswan-1.2.24-1.1 on GA media","description":"These are all security issues fixed in the NetworkManager-applet-libreswan-1.2.24-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-10-23T00:00:00Z","modified":"2026-02-04T03:50:57.493639Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RLSA-2024:9555","title":"Important: NetworkManager-libreswan security update","description":"This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop\n\nSecurity Fix(es):\n\n* NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:49.937392Z","modified":"2026-02-04T21:00:07.299228Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}