Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-91840 →

DEBIAN-CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline ch...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 network-manager-vpnc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 network-manager-vpnc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org