CVE-2012-2736: Medium severity Gnome NetworkManager vulnerability
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2736?
The severity of CVE-2012-2736 is medium with a CVSS score of 4.4.
How does CVE-2012-2736 affect NetworkManager?
CVE-2012-2736 affects NetworkManager version 0.9.2.0 in which it creates an open/insecure network when a new wireless network is created with WPA/WPA2 security in AdHoc mode.
Which software versions are affected by CVE-2012-2736?
NetworkManager versions 0.9.2.0, 1.14.6-2+deb10u1, 1.30.6-1+deb11u1, 1.42.4-1, 1.44.2-1, and 1.44.2-3 are affected by CVE-2012-2736.
How can I fix CVE-2012-2736?
To fix CVE-2012-2736, update NetworkManager to version 1.14.6-2+deb10u1, 1.30.6-1+deb11u1, 1.42.4-1, 1.44.2-1, or 1.44.2-3.
Where can I find more information about CVE-2012-2736?
You can find more information about CVE-2012-2736 at the following references: [https://security-tracker.debian.org/tracker/CVE-2012-2736](https://security-tracker.debian.org/tracker/CVE-2012-2736), [http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html](http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html), and [http://www.openwall.com/lists/oss-security/2012/06/15/2](http://www.openwall.com/lists/oss-security/2012/06/15/2).