CVE-2024-6501

LowCVSS 3.1/10Last modified Jun 17, 2026

Description

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-65026.5An issue was discovered in GitLab CE/EE affecting all versions starting from 8.2 prior to 17.1.6 starting from 17.2 prior to 17.2.4, and staCVE-2024-65045.3Rapid7 InsightVM Console versions below 6.6.260 suffer from a protection mechanism failure whereby an attacker with network access to the InCVE-2024-65056.8A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table dataCVE-2024-65068.2Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrw_log" functionality. This vulnerability could CVE-2024-65078.1Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() APICVE-2024-65088.0An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2CVE-2024-65096.5Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for file globbing which couCVE-2024-65107.8Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COMCVE-2024-65116.1A vulnerability classified as problematic was found in y_project RuoYi up to 4.7.9. Affected by this vulnerability is the function isJsonReqCVE-2024-65126.5Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users witCVE-2024-65158.1Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintCVE-2024-65166.1Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected
CVE-2024-6501: Low severity, CVSS 3.1 | Vulnix