Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - GNOME NetworkManager バージョン 1.10.2 以前には、DNS リゾルバーに情報漏洩CWE-200の脆弱性が含まれています。これにより、VPN 使用中に、プライベート DNS クエリがローカルネットワークの DNS サーバーに漏洩する可能性があります。
    この脆弱性は で修正されているようで、一部の Ubuntu 16.04 パッケージは修正されましたが、その後の更新で修正が削除されました。 cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 Upstream 修正は現時点では利用できないようです。CVE-2018-1000135

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

このNetworkManagerの更新では、次の問題を修正します：

以下のセキュリティ問題が修正されました：

  - CVE-2018-1000135：VPNの使用中に、他のDNSサーバーへのプライベートDNSクエリの漏洩が発生する可能性があります（bsc#1086263、bgo#746422）。

この更新はSUSEからインポートされました：SLE-15：更新プロジェクトを更新します。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - GNOME NetworkManager 1.10.2 和更旧版本的 DNS 解析器中包含一个信息暴露 (CWE-200) 漏洞在 VPN 上时可导致私人 DNS 查询泄露给本地网络的 DNS 服务器。
    此漏洞似乎已在 中修复。已修复某些 Ubuntu 16.04 程序包但之后的更新删除了该补丁。 cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 此时上游补丁似乎不可用。 (CVE-2018-1000135)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

このNetworkManagerの更新では、次の問題を修正します：

以下のセキュリティ問題が修正されました：

CVE-2018-1000135：VPNの使用中に、他のDNSサーバーへのプライベートDNSクエリの漏洩が発生する可能性があります（bsc#1086263、bgo#746422）。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - GNOME NetworkManager 1.10.2 和更舊版本在 DNS 解析器中含有一個 Information Exposure (CWE-200) 弱點可導致在 VPN 上時私人 DNS 查詢洩漏給本機網路的 DNS 伺服器。
    此弱點似乎已在某些 Ubuntu 16.04 套件中修正但之後的更新移除了該修正。 cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 目前似乎沒有可用的上游修正。 (CVE-2018-1000135)

請注意，Nessus 依賴供應商報告的套件存在。

This update for NetworkManager fixes the following issues :

Following security issue was fixed :

  - CVE-2018-1000135: A potential leak of private DNS     queries to other DNS servers could happen while on VPN     (bsc#1086263, bgo#746422).

This update was imported from the SUSE:SLE-15:Update update project.

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNOME NetworkManager version 1.10.2 and earlier     contains a Information Exposure (CWE-200) vulnerability     in DNS resolver that can result in Private DNS queries     leaked to local network's DNS servers, while on VPN.
    This vulnerability appears to have been fixed in Some     Ubuntu 16.04 packages were fixed, but later updates     removed the fix. cf.
    https://bugs.launchpad.net/ubuntu/+bug/1754671 an     upstream fix does not appear to be available at this     time.(CVE-2018-1000135)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for NetworkManager fixes the following issues :

Following security issue was fixed :

CVE-2018-1000135: A potential leak of private DNS queries to other DNS servers could happen while on VPN (bsc#1086263, bgo#746422).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the NetworkManager packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - An information exposure vulnerability has been found in     NetworkManager when dnsmasq is used in DNS processing     mode. An attacker in control of a DNS server could     receive DNS queries even though a Virtual Private     Network (VPN) was configured on the vulnerable     machine.(CVE-2018-1000135)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the NetworkManager package has been released.

According to the version of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - An information exposure vulnerability has been found in     NetworkManager when dnsmasq is used in DNS processing     mode. An attacker in control of a DNS server could     receive DNS queries even though a Virtual Private     Network (VPN) was configured on the vulnerable     machine.(CVE-2018-1000135)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in     DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN.
    This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates     removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be     available at this time. (CVE-2018-1000135)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
248114	Linux Distros のパッチ未適用の脆弱性: CVE-2018-1000135	Nessus	Misc.	2025/8/11	2025/8/11	high
125694	openSUSEセキュリティ更新プログラム：NetworkManager（openSUSE-2019-1494）	Nessus	SuSE Local Security Checks	2019/6/4	2024/5/17	high
248114	Linux Distros 未修补的漏洞：CVE-2018-1000135	Nessus	Misc.	2025/8/11	2025/8/11	high
125539	SUSE SLED15 / SLES15セキュリティ更新プログラム：NetworkManager（SUSE-SU-2019:1369-1）	Nessus	SuSE Local Security Checks	2019/5/29	2024/5/20	high
248114	Linux Distros 未修補的弱點：CVE-2018-1000135	Nessus	Misc.	2025/8/11	2025/8/11	high
125694	openSUSE Security Update : NetworkManager (openSUSE-2019-1494)	Nessus	SuSE Local Security Checks	2019/6/4	2024/5/17	high
132171	EulerOS 2.0 SP3 : NetworkManager (EulerOS-SA-2019-2636)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/3	high
131863	EulerOS 2.0 SP2 : NetworkManager (EulerOS-SA-2019-2371)	Nessus	Huawei Local Security Checks	2019/12/10	2024/4/4	high
125539	SUSE SLED15 / SLES15 Security Update : NetworkManager (SUSE-SU-2019:1369-1)	Nessus	SuSE Local Security Checks	2019/5/29	2024/5/20	high
136227	EulerOS Virtualization for ARM 64 3.0.2.0 : NetworkManager (EulerOS-SA-2020-1524)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/13	high
136405	Photon OS 1.0: Networkmanager PHSA-2020-1.0-0291	Nessus	PhotonOS Local Security Checks	2020/5/7	2020/5/8	high
137941	EulerOS Virtualization 3.0.6.0 : NetworkManager (EulerOS-SA-2020-1722)	Nessus	Huawei Local Security Checks	2020/7/1	2024/3/5	high
132365	EulerOS 2.0 SP5 : NetworkManager (EulerOS-SA-2019-2698)	Nessus	Huawei Local Security Checks	2019/12/23	2024/4/2	high
248114	Linux Distros Unpatched Vulnerability : CVE-2018-1000135	Nessus	Misc.	2025/8/11	2025/8/11	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high