Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:networkmanager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductNetworkmanager (fc83cd90-10fd-5ed7-bc69-5e8d9c80eba5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/networkmanager/networkmanager purl2cpe 2026-06-01 10:17:22.428921
pkg:rpm/fedora/networkmanager purl2cpe 2026-06-01 10:17:22.428923
pkg:rpm/opensuse/networkmanager purl2cpe 2026-06-01 10:17:22.428925

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20297 vulnerable 2026-06-08 05:29:08.927726 Details available
A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.
Published: 2021-05-26T20:46:59.000Z
Updated: 2024-08-03T17:37:23.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10754 vulnerable 2026-06-08 05:16:35.832057 Details available
MEDIUM (4.3)
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
Published: 2020-06-08T17:16:26.000Z
Updated: 2024-08-04T11:14:15.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000135 vulnerable 2026-06-08 05:10:25.504819 Details available
GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.
Published: 2018-03-20T13:00:00.000Z
Updated: 2024-08-05T12:33:49.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0272 vulnerable 2026-06-08 05:06:14.184736 Details available
GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.
Published: 2015-11-17T15:00:00.000Z
Updated: 2024-08-06T04:03:10.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1096 vulnerable 2026-06-08 05:00:47.403242 Details available
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
Published: 2020-03-10T16:36:31.000Z
Updated: 2024-08-06T18:45:27.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2176 vulnerable 2026-06-08 04:58:04.469952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1943 vulnerable 2026-06-08 04:58:03.166323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7246 vulnerable 2026-06-08 04:49:30.995742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2410 vulnerable 2026-06-08 04:48:29.274458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.