NetworkManager-l2tp vulnerabilities
2 known vulnerabilities in NetworkManager-l2tp from Nm-l2tp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
NetworkManager-l2tp: Improper Neutralization of Argument Delimiters in a Command
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a crafted VPN username. Att
- 7.8 High severity
NetworkManager-l2tp: Improper Neutralization of Argument Delimiters in a Command
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing tra