https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:38:36 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:0288 <p><strong>Affected:</strong> AlmaLinux:8: NetworkManager, AlmaLinux:8: NetworkManager-adsl, AlmaLinux:8: NetworkManager-bluetooth, AlmaLinux:8: NetworkManager-cloud-setup, AlmaLinux:8: NetworkManager-config-connectivity-redhat, AlmaLinux:8: NetworkManager-config-server, AlmaLinux:8: NetworkManager-dispatcher-routing-rules, AlmaLinux:8: NetworkManager-initscripts-updown, AlmaLinux:8: NetworkManager-libnm, AlmaLinux:8: NetworkManager-libnm-devel and 6 more</p> <p>Security and Bug Fix(es):</p> <p>* NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661) * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051) * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)</p> <p><strong>Affected:</strong> AlmaLinux:8: NetworkManager, AlmaLinux:8: NetworkManager-adsl, AlmaLinux:8: NetworkManager-bluetooth, AlmaLinux:8: NetworkManager-cloud-setup, AlmaLinux:8: NetworkManager-config-connectivity-redhat, AlmaLinux:8: NetworkManager-config-server, AlmaLinux:8: NetworkManager-dispatcher-routing-rules, AlmaLinux:8: NetworkManager-initscripts-updown, AlmaLinux:8: NetworkManager-libnm, AlmaLinux:8: NetworkManager-libnm-devel and 6 more</p> <p>Security and Bug Fix(es):</p> <p>* NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661) * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051) * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)</p> https://cve.radiocsirt.org/vuln/alsa-2025:0288 https://cve.radiocsirt.org/vuln/bdu:2024-03571 bdu:2024-03571 https://cve.radiocsirt.org/vuln/bdu:2024-03571 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0414 certfr-2024-avi-0414 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0414 https://cve.radiocsirt.org/vuln/euvd-2026-160452 EUVD-2026-160452 https://cve.radiocsirt.org/vuln/euvd-2026-160452 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3661 <p>DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.</p> <p>DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3661 https://cve.radiocsirt.org/vuln/ghsa-jcv7-6v4q-4m7x <p>By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks.</p> <p>By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-jcv7-6v4q-4m7x https://cve.radiocsirt.org/vuln/gsd-2024-3661 gsd-2024-3661 https://cve.radiocsirt.org/vuln/gsd-2024-3661 https://cve.radiocsirt.org/vuln/rhsa-2025:0288 <p>DHCP: DHCP routing options can manipulate interface-based VPN traffic</p> <p>DHCP: DHCP routing options can manipulate interface-based VPN traffic</p> https://cve.radiocsirt.org/vuln/rhsa-2025:0288 https://cve.radiocsirt.org/vuln/rhsa-2025:16411 <p>DHCP: DHCP routing options can manipulate interface-based VPN traffic</p> <p>DHCP: DHCP routing options can manipulate interface-based VPN traffic</p> https://cve.radiocsirt.org/vuln/rhsa-2025:16411 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3661 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openvpn, Ubuntu:14.04:LTS: pptpd, Ubuntu:16.04:LTS: network-manager-pptp, Ubuntu:Pro:16.04:LTS: openvpn, Ubuntu:16.04:LTS: pptp-linux, Ubuntu:16.04:LTS: pptpd, Ubuntu:Pro:16.04:LTS: connman, Ubuntu:16.04:LTS: gadmin-openvpn-client, Ubuntu:16.04:LTS: gadmin-openvpn-server, Ubuntu:16.04:LTS: kvpnc and 108 more</p> <p>DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openvpn, Ubuntu:14.04:LTS: pptpd, Ubuntu:16.04:LTS: network-manager-pptp, Ubuntu:Pro:16.04:LTS: openvpn, Ubuntu:16.04:LTS: pptp-linux, Ubuntu:16.04:LTS: pptpd, Ubuntu:Pro:16.04:LTS: connman, Ubuntu:16.04:LTS: gadmin-openvpn-client, Ubuntu:16.04:LTS: gadmin-openvpn-server, Ubuntu:16.04:LTS: kvpnc and 108 more</p> <p>DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3661 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1047 <p>Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in VPN-Clients ausnutzen, die auf DHCP konfigurierten Systemen laufen, um den Datenverkehr umzuleiten.</p> <p>Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in VPN-Clients ausnutzen, die auf DHCP konfigurierten Systemen laufen, um den Datenverkehr umzuleiten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1047