CVE catalog

CVE-2018-1000135

network-manager: CVE-2018-1000135

Severity: Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: Mar 20, 2018, 1:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.02% · Oct 25, 2026

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	network-manager	sid	`1.58.1-1`	fixed
Debian	network-manager	forky	`1.58.1-1`	fixed
Debian	network-manager	trixie	`1.52.1-1`	fixed
Debian	network-manager	bookworm	`1.42.4-1+deb12u1`	fixed
Ubuntu	network-manager	16.04	`1.0.4-0ubuntu5`	vulnerable
Ubuntu	network-manager	16.04	`1.0.4-0ubuntu6`	vulnerable
Ubuntu	network-manager	16.04	`1.0.4-0ubuntu7`	vulnerable
Ubuntu	network-manager	16.04	`1.0.4-0ubuntu8`	vulnerable
Ubuntu	network-manager	16.04	`1.0.4-0ubuntu9`	vulnerable
Ubuntu	network-manager	16.04	`1.0.4-0ubuntu10`	vulnerable
Ubuntu	network-manager	16.04	`1.1.93-0ubuntu2`	vulnerable
Ubuntu	network-manager	16.04	`1.1.93-0ubuntu3`	vulnerable
Ubuntu	network-manager	16.04	`1.1.93-0ubuntu4`	vulnerable
Ubuntu	network-manager	16.04	`1.2.0-0ubuntu0.16.04.2`	vulnerable
Ubuntu	network-manager	16.04	`1.2.0-0ubuntu0.16.04.3`	vulnerable
Ubuntu	network-manager	16.04	`1.2.2-0ubuntu0.16.04.1`	vulnerable
Ubuntu	network-manager	16.04	`1.2.2-0ubuntu0.16.04.3`	vulnerable
Ubuntu	network-manager	16.04	`1.2.2-0ubuntu0.16.04.4`	vulnerable
Ubuntu	network-manager	16.04	`1.2.6-0ubuntu0.16.04.1`	vulnerable
Ubuntu	network-manager	16.04	`1.2.6-0ubuntu0.16.04.2`	vulnerable
Ubuntu	network-manager	16.04	`1.2.6-0ubuntu0.16.04.3`	vulnerable
Ubuntu	network-manager	18.04	`1.8.4-1ubuntu3`	vulnerable
Ubuntu	network-manager	18.04	`1.8.4-1ubuntu4`	vulnerable
Ubuntu	network-manager	18.04	`1.10.4-1ubuntu2`	vulnerable
Ubuntu	network-manager	18.04	`1.10.4-1ubuntu3`	vulnerable
Ubuntu	network-manager	18.04	`1.10.6-2ubuntu1`	vulnerable
Ubuntu	network-manager	18.04	`1.10.6-2ubuntu1.1`	vulnerable
Ubuntu	network-manager	18.04	`1.10.6-2ubuntu1.2`	fixed
Opensuse	NetworkManager	tumbleweed	`1.32.10-2.1`	fixed
Opensuse	NetworkManager	leap 15.0	`1.10.6-lp150.4.6.1`	fixed
Suse	NetworkManager	linux enterprise module for basesystem 15	`1.10.6-5.6.1`	fixed
Suse	NetworkManager	linux enterprise module for desktop applications 15	`1.10.6-5.6.1`	fixed
Suse	NetworkManager	linux enterprise workstation extension 15	`1.10.6-5.6.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	network-manager	source	sid	`1.12.0-2`	not yet assigned	Not reported	[895658]
Debian	network-manager	source	forky	`1.12.0-2`	not yet assigned	Not reported	[895658]
Debian	network-manager	source	trixie	`1.12.0-2`	not yet assigned	Not reported	[895658]
Debian	network-manager	source	bookworm	`1.12.0-2`	not yet assigned	Not reported	[895658]
Ubuntu	network-manager	deb	18.04	`1.10.6-2ubuntu1.2`	Not reported	UBUNTU-CVE-2018-1000135	Not reported
Opensuse	NetworkManager	rpm	tumbleweed	`1.32.10-2.1`	Not reported	OPENSUSE-SU-2024:10602-1	Not reported
Opensuse	NetworkManager	rpm	leap 15.0	`1.10.6-lp150.4.6.1`	Not reported	OPENSUSE-SU-2019:1494-1	Not reported
Suse	NetworkManager	rpm	linux enterprise module for basesystem 15	`1.10.6-5.6.1`	Not reported	SUSE-SU-2019:1369-1	Not reported
Suse	NetworkManager	rpm	linux enterprise module for desktop applications 15	`1.10.6-5.6.1`	Not reported	SUSE-SU-2019:1369-1	Not reported
Suse	NetworkManager	rpm	linux enterprise workstation extension 15	`1.10.6-5.6.1`	Not reported	SUSE-SU-2019:1369-1	Not reported

[Debian bug #895658]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libnm0]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[libnm0-32bit]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-bluetooth]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-branding-upstream]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · noarch · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-cloud-setup]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-config-server]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · noarch · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-devel]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-devel-32bit]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-lang]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · noarch · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-ovs]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-pppoe]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-tui]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[NetworkManager-wwan]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed
[typelib-1_0-NM-1_0]Unknown
Source package: [NetworkManager]
Details (1)
- 1.56.1-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.32.10-2.1
  Version impact unknown
  dsa · NetworkManager · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[gir1.2-nm-1.0]Fixed
Source package: [network-manager]
Details (2)
- 1.42.4-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
- 1.42.4-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
[libnm0]Fixed
Source package: [network-manager]
Details (2)
- 1.42.4-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
- 1.42.4-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
[libnm-dev]Fixed
Source package: [network-manager]
Details (2)
- 1.42.4-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
- 1.42.4-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
[network-manager]Fixed
Details (2)
- 1.42.4-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
- 1.42.4-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
[network-manager-config-connectivity-debian]Fixed
Source package: [network-manager]
Details (2)
- 1.42.4-1+deb12u1 · all · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
- 1.42.4-1+deb12u1 · all · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
[network-manager-dev]Fixed
Source package: [network-manager]
Details (2)
- 1.42.4-1+deb12u1 · all · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12
- 1.42.4-1+deb12u1 · all · bookworm
  Fixed · Fixed: 1.12.0-2
  dsa · network-manager · debian · bookworm; dsa · network-manager · debian · 12

Next results

Observed: Oct 23, 2026, 5:32:20 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]