CVE-2015-2924
NetworkManager: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements
Severity
LowRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · April 2, 2015
Updated · June 27, 2026
Description
A flaw was found in the way NetworkManager handled router advertisements. An unprivileged user on a local network could use IPv6 Neighbor Discovery ICMP to broadcast a non-route with a low hop limit, causing machines to lower the hop limit on existing IPv6 routes. If this limit is small enough, IPv6 packets would be dropped before reaching the final destination.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 3.3AV:A/AC:L/Au:N/C:N/I:N/A:P
CWE-358 · Improperly Implemented Security Check for Standard