Логотип exploitDog
bind:"BDU:2020-01815" OR bind:"CVE-2018-1000135"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2020-01815" OR bind:"CVE-2018-1000135"

Количество 8

Количество 8

fstec логотип

BDU:2020-01815

почти 8 лет назад

Уязвимость утилиты управление сетевыми подключениями GNOME NetworkManage, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить несанкционированный доступ к информации

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2018-1000135

почти 8 лет назад

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2018-1000135

почти 8 лет назад

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 4.8
EPSS: Низкий
nvd логотип

CVE-2018-1000135

почти 8 лет назад

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2018-1000135

почти 8 лет назад

GNOME NetworkManager version 1.10.2 and earlier contains a Information ...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:1494-1

больше 6 лет назад

Security update for NetworkManager

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:1369-1

больше 6 лет назад

Security update for NetworkManager

EPSS: Низкий
github логотип

GHSA-q94f-chfh-pq22

больше 3 лет назад

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2020-01815

Уязвимость утилиты управление сетевыми подключениями GNOME NetworkManage, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить несанкционированный доступ к информации

CVSS3: 7.5
1%
Низкий
почти 8 лет назад
ubuntu логотип
CVE-2018-1000135

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 7.5
1%
Низкий
почти 8 лет назад
redhat логотип
CVE-2018-1000135

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 4.8
1%
Низкий
почти 8 лет назад
nvd логотип
CVE-2018-1000135

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 7.5
1%
Низкий
почти 8 лет назад
debian логотип
CVE-2018-1000135

GNOME NetworkManager version 1.10.2 and earlier contains a Information ...

CVSS3: 7.5
1%
Низкий
почти 8 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1494-1

Security update for NetworkManager

1%
Низкий
больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:1369-1

Security update for NetworkManager

1%
Низкий
больше 6 лет назад
github логотип
GHSA-q94f-chfh-pq22

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

CVSS3: 7.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу