Networkmanager L2Tp
Approved changes feed: RSS · Atom
cpe:2.3:a:nm-l2tp:networkmanager-l2tp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nm L2Tp (38df9d5e-a141-5247-a0d1-8bfbea0a63f8) |
|---|---|
| Product | Networkmanager L2Tp (f9e76675-85ec-53c1-8e31-0a38543c302d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93337 |
vulnerable | 2026-10-13 12:28:56.194652 |
NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection
HIGH (7.8)
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a valid integer. Attackers can exploit the verbatim write of unvalidated strings into the pppd options file via write_config_option() to inject the plugin directive, causing the privileged pppd process to load an attacker-controlled shared object and achieve arbitrary code execution as root.
Published: 2026-09-17T19:17:14.537Z
Updated: 2026-09-23T18:07:08.359Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.