RHSA-2025:0288
- Source
- https://access.redhat.com/errata/RHSA-2025:0288
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2025:0288.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2025:0288
- Upstream
- Published
- 2025-01-14T10:10:24Z
- Modified
- 2025-11-22T13:32:10Z
- Severity
-
- 7.6 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CVSS Calculator
- Summary
- Red Hat Security Advisory: Bug fix of NetworkManager
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2025:0288
- https://access.redhat.com/security/updates/classification/#moderate
- https://issues.redhat.com/browse/RHEL-73052
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0288.json
- https://access.redhat.com/security/cve/CVE-2024-3661
- https://bugzilla.redhat.com/show_bug.cgi?id=2320141
- https://www.cve.org/CVERecord?id=CVE-2024-3661
- https://nvd.nist.gov/vuln/detail/CVE-2024-3661
- https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/
- https://bst.cisco.com/quickview/bug/CSCwk05814
- https://datatracker.ietf.org/doc/html/rfc2131#section-7
- https://datatracker.ietf.org/doc/html/rfc3442#section-7
- https://fortiguard.fortinet.com/psirt/FG-IR-24-170
- https://issuetracker.google.com/issues/263721377
- https://krebsonsecurity.com/2024/05/why-your-vpn-may-not-be-as-secure-as-it-claims/
- https://lowendtalk.com/discussion/188857/a-rogue-dhcp-server-within-your-network-can-and-will-hijack-your-vpn-traffic
- https://mullvad.net/en/blog/evaluating-the-impact-of-tunnelvision
- https://my.f5.com/manage/s/article/K000139553
- https://news.ycombinator.com/item?id=40279632
- https://news.ycombinator.com/item?id=40284111
- https://security.paloaltonetworks.com/CVE-2024-3661
- https://support.citrix.com/article/CTX677069/cloud-software-group-security-advisory-for-cve20243661
- https://tunnelvisionbug.com/
- https://www.agwa.name/blog/post/hardening_openvpn_for_def_con
- https://www.leviathansecurity.com/research/tunnelvision
- https://www.theregister.com/2024/05/07/vpn_tunnelvision_dhcp/
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00009
- https://www.zscaler.com/blogs/security-research/cve-2024-3661-k-tunnelvision-exposes-vpn-bypass-vulnerability