CVE catalog

CVE-2018-10900

network-manager-vpnc: CVE-2018-10900

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.92% · Oct 25, 2026

Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannetwork-manager-vpncsid1.4.0-4fixed
Debiannetwork-manager-vpnctrixie1.4.0-2fixed
Debiannetwork-manager-vpncbookworm1.2.8-4fixed
SuseNetworkManager-vpnclinux enterprise desktop 12 sp31.0.8-8.4.2fixed
SuseNetworkManager-vpnclinux enterprise workstation extension 12 sp31.0.8-8.4.2fixed
Ubuntunetwork-manager-vpnc14.040.9.8.2-1ubuntu1vulnerable
Ubuntunetwork-manager-vpnc14.040.9.8.6-1ubuntu1vulnerable
Ubuntunetwork-manager-vpnc14.040.9.8.6-1ubuntu2vulnerable
Ubuntunetwork-manager-vpnc14.040.9.8.6-1ubuntu2.1fixed
Ubuntunetwork-manager-vpnc16.040.9.10.0-1ubuntu1vulnerable
Ubuntunetwork-manager-vpnc16.041.0.8-1ubuntu1vulnerable
Ubuntunetwork-manager-vpnc16.041.1.93-1vulnerable
Ubuntunetwork-manager-vpnc16.041.1.93-1ubuntu0.1fixed
Ubuntunetwork-manager-vpnc18.041.2.4-4vulnerable
Ubuntunetwork-manager-vpnc18.041.2.4-6vulnerable
Ubuntunetwork-manager-vpnc18.041.2.4-6ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannetwork-manager-vpncsourcesid1.2.6-1not yet assignedNot reported[904255]
Debiannetwork-manager-vpncsourcetrixie1.2.6-1not yet assignedNot reported[904255]
Debiannetwork-manager-vpncsourcebookworm1.2.6-1not yet assignedNot reported[904255]
SuseNetworkManager-vpncrpmlinux enterprise desktop 12 sp31.0.8-8.4.2Not reportedSUSE-SU-2018:2297-1Not reported
SuseNetworkManager-vpncrpmlinux enterprise workstation extension 12 sp31.0.8-8.4.2Not reportedSUSE-SU-2018:2297-1Not reported
Ubuntunetwork-manager-vpncdeb14.040.9.8.6-1ubuntu2.1Not reportedUBUNTU-CVE-2018-10900Not reported
Ubuntunetwork-manager-vpncdeb16.041.1.93-1ubuntu0.1Not reportedUBUNTU-CVE-2018-10900Not reported
Ubuntunetwork-manager-vpncdeb18.041.2.4-6ubuntu0.1Not reportedUBUNTU-CVE-2018-10900Not reported

[Debian bug #904255]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [network-manager-vpnc]Fixed
    Details (2)

    • 1.2.8-4 · amd64 · bookworm

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · bookworm; dsa · network-manager-vpnc · debian · 12

    • 1.2.8-4 · arm64 · bookworm

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · bookworm; dsa · network-manager-vpnc · debian · 12

  • [network-manager-vpnc-gnome]Fixed

    Source package: [network-manager-vpnc]

    Details (2)

    • 1.2.8-4 · amd64 · bookworm

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · bookworm; dsa · network-manager-vpnc · debian · 12

    • 1.2.8-4 · arm64 · bookworm

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · bookworm; dsa · network-manager-vpnc · debian · 12

[Debian 13 (Trixie)]

  • [network-manager-vpnc]Fixed
    Details (2)

    • 1.4.0-2 · amd64 · trixie

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · 13

    • 1.4.0-2 · arm64 · trixie

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · 13

  • [network-manager-vpnc-gnome]Fixed

    Source package: [network-manager-vpnc]

    Details (2)

    • 1.4.0-2 · amd64 · trixie

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · 13

    • 1.4.0-2 · arm64 · trixie

      Fixed · Fixed: 1.2.6-1

      dsa · network-manager-vpnc · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]