CVE-2015-0272
Aliases:UBUNTU-CVE-2015-0272DEBIAN-CVE-2015-0272
Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 17 Nov 2015, 15:00
Last modified:06 Aug 2024, 04:03
Vulnerability Summary
Overall Risk (default)
low
21/100 CVSS Score
5 MEDIUM
v2.0 (nvd)
EPSS Score
5.06% LOW
5% probability +3.98%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
17 Nov 2015, 15:00
Published
Vulnerability first disclosed
06 Aug 2024, 04:03
Last Modified
Vulnerability information updated
Description
GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.
CVSS Metrics
- v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Trends
Current EPSS score: 5.06%• Percentile: 92%
Affected Systems
- canonical•ubuntu_linux
12.04
- debian•network-manager
< 1.0.4-1 | < 1.0.4-1 | < 1.0.4-1 | < 1.0.4-1
- ubuntu•linux
< 3.13.0-66.108
- ubuntu•linux-azure
all
- ubuntu•linux-azure-6.11
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.15
all
- ubuntu•linux-gcp
all
- ubuntu•linux-gcp-6.11
all
- ubuntu•linux-gke
all
- ubuntu•linux-gkeop
all
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-6.11
all
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-lowlatency-hwe-6.11
all
- ubuntu•linux-lts-utopic
< 3.16.0-52.71~14.04.1
- ubuntu•linux-lts-vivid
< 3.19.0-31.36~14.04.1
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
all
- ubuntu•linux-realtime
all | all
- ubuntu•linux-riscv
all | all | all
- gnome•networkmanager
< 1.2.0
- oracle•linux
7
- suse•linux_enterprise_debuginfo
11:sp2 | 11:sp3 | 11:sp4
- suse•linux_enterprise_desktop
11:sp3 | 11:sp4 | 12 | 12:sp1
- suse•linux_enterprise_real_time_extension
11:sp3 | 11:sp4
- suse•linux_enterprise_server
11 | 11:sp2 | 11:sp3 | 11:sp4 | 12 | 12:sp1
- suse•linux_enterprise_software_development_kit
11:sp3 | 11:sp4 | 12 | 12:sp1
- suse•linux_enterprise_workstation_extension
12 | 12:sp1
References (22)
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html
- http://www.ubuntu.com/usn/USN-2792-1
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76814
- http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d5fc88e573fa58b93034b04d35a2454f5d28cad9
- https://bugzilla.redhat.com/show_bug.cgi?id=1192132
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
- https://ubuntu.com/security/CVE-2015-0272
- https://ubuntu.com/security/notices/USN-2776-1
- https://ubuntu.com/security/notices/USN-2775-1
- https://ubuntu.com/security/notices/USN-2778-1
- https://ubuntu.com/security/notices/USN-2779-1
- https://ubuntu.com/security/notices/USN-2792-1
- https://ubuntu.com/security/notices/USN-2796-1
- https://ubuntu.com/security/notices/USN-2797-1
- https://www.cve.org/CVERecord?id=CVE-2015-0272
- https://security-tracker.debian.org/tracker/CVE-2015-0272