CVE-2024-3661 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-3661 Interim 1 9 2025-02-16T01:48:54Z current 2024-05-08T23:13:21Z 2025-02-16T01:48:54Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-3661 DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-January/000755.html E-Mail link for RHSA-2025:0288 https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-January/000766.html E-Mail link for RHSA-2025:0377 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 8 SUSE Liberty Linux 9 NetworkManager-1.40.16-18.el8_10 NetworkManager-1.48.10-5.el9_5 NetworkManager-adsl-1.40.16-18.el8_10 NetworkManager-adsl-1.48.10-5.el9_5 NetworkManager-bluetooth-1.40.16-18.el8_10 NetworkManager-bluetooth-1.48.10-5.el9_5 NetworkManager-cloud-setup-1.40.16-18.el8_10 NetworkManager-cloud-setup-1.48.10-5.el9_5 NetworkManager-config-connectivity-suse-1.40.16-18.el8_10 NetworkManager-config-connectivity-suse-1.48.10-5.el9_5 NetworkManager-config-server-1.40.16-18.el8_10 NetworkManager-config-server-1.48.10-5.el9_5 NetworkManager-dispatcher-routing-rules-1.40.16-18.el8_10 NetworkManager-dispatcher-routing-rules-1.48.10-5.el9_5 NetworkManager-initscripts-updown-1.40.16-18.el8_10 NetworkManager-initscripts-updown-1.48.10-5.el9_5 NetworkManager-libnm-1.40.16-18.el8_10 NetworkManager-libnm-1.48.10-5.el9_5 NetworkManager-libnm-devel-1.40.16-18.el8_10 NetworkManager-libnm-devel-1.48.10-5.el9_5 NetworkManager-ovs-1.40.16-18.el8_10 NetworkManager-ovs-1.48.10-5.el9_5 NetworkManager-ppp-1.40.16-18.el8_10 NetworkManager-ppp-1.48.10-5.el9_5 NetworkManager-team-1.40.16-18.el8_10 NetworkManager-team-1.48.10-5.el9_5 NetworkManager-tui-1.40.16-18.el8_10 NetworkManager-tui-1.48.10-5.el9_5 NetworkManager-wifi-1.40.16-18.el8_10 NetworkManager-wifi-1.48.10-5.el9_5 NetworkManager-wwan-1.40.16-18.el8_10 NetworkManager-wwan-1.48.10-5.el9_5 NetworkManager-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-adsl-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-bluetooth-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-cloud-setup-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-config-connectivity-suse-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-config-server-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-dispatcher-routing-rules-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-initscripts-updown-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-libnm-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-libnm-devel-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-ovs-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-ppp-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-team-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-tui-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-wifi-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-wwan-1.40.16-18.el8_10 as a component of SUSE Liberty Linux 8 NetworkManager-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-adsl-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-bluetooth-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-cloud-setup-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-config-connectivity-suse-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-config-server-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-dispatcher-routing-rules-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-initscripts-updown-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-libnm-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-libnm-devel-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-ovs-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-ppp-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-team-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-tui-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-wifi-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 NetworkManager-wwan-1.48.10-5.el9_5 as a component of SUSE Liberty Linux 9 DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. CVE-2024-3661 SUSE Liberty Linux 8:NetworkManager-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-adsl-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-bluetooth-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-cloud-setup-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-config-connectivity-suse-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-config-server-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-dispatcher-routing-rules-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-initscripts-updown-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-libnm-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-libnm-devel-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-ovs-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-ppp-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-team-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-tui-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-wifi-1.40.16-18.el8_10 SUSE Liberty Linux 8:NetworkManager-wwan-1.40.16-18.el8_10 SUSE Liberty Linux 9:NetworkManager-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-adsl-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-bluetooth-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-cloud-setup-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-config-connectivity-suse-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-config-server-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-dispatcher-routing-rules-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-initscripts-updown-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-libnm-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-libnm-devel-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-ovs-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-ppp-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-team-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-tui-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-wifi-1.48.10-5.el9_5 SUSE Liberty Linux 9:NetworkManager-wwan-1.48.10-5.el9_5 important 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L