Extra Packages For Enterprise Linux Epel
Monthly
Local privilege escalation in the NetworkManager-l2tp VPN plugin allows any local user who can create and activate their own L2TP profile to inject a newline into connection properties (vpn.data / vpn.secrets), so the root-running pluto daemon executes an attacker-supplied leftupdown command and yields root on the host. Fedora builds 1.52.0 through 1.52.3 and EPEL builds 1.20.0 through 1.20.23 are affected; fixed versions 1.52.4 and 1.20.24 are published upstream. There is no CISA KEV listing and no public exploit identified at time of analysis, although a public technical writeup of the 'newline to root' technique is referenced and the identical bug class was previously exploited in CVE-2018-10900 (NetworkManager-vpnc).
Local privilege escalation in the NetworkManager-l2tp VPN plugin allows any local user who can create and activate their own L2TP profile to inject a newline into connection properties (vpn.data / vpn.secrets), so the root-running pluto daemon executes an attacker-supplied leftupdown command and yields root on the host. Fedora builds 1.52.0 through 1.52.3 and EPEL builds 1.20.0 through 1.20.23 are affected; fixed versions 1.52.4 and 1.20.24 are published upstream. There is no CISA KEV listing and no public exploit identified at time of analysis, although a public technical writeup of the 'newline to root' technique is referenced and the identical bug class was previously exploited in CVE-2018-10900 (NetworkManager-vpnc).