CVE-2024-3661

Publication date 6 May 2024

Last updated 28 July 2025

Ubuntu priority

High

Why this priority?

Cvss 3 Severity Score

7.6 · High

Score breakdown

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

Read the notes from the security team

Why is this CVE high priority?

An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

Learn more about Ubuntu priority

Status

Package Ubuntu Release Status
connman 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
gadmin-openvpn-client 25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Not in release
22.04 LTS jammy Not in release
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
gadmin-openvpn-server 25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Not in release
22.04 LTS jammy Not in release
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
golang-github-apparentlymart-go-openvpn-mgmt 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
kvpnc 25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Not in release
22.04 LTS jammy Not in release
20.04 LTS focal Not in release
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
libreswan 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
mozillavpn 25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Not in release
22.04 LTS jammy Ignored see notes
20.04 LTS focal Not in release
n2n 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
network-manager-fortisslvpn 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
network-manager-iodine 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
network-manager-l2tp 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
network-manager-openconnect 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
network-manager-openvpn 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
network-manager-pptp 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
network-manager-sstp 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Not in release
network-manager-strongswan 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
network-manager-vpnc 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
openconnect 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
openfortivpn 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
openvpn 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
14.04 LTS trusty Ignored see notes
pptp-linux 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
pptpd 25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
14.04 LTS trusty Ignored see notes
quicktun 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
riseup-vpn 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Not in release
20.04 LTS focal Not in release
softether-vpn 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Not in release
sshuttle 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
tinc 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
vpnc 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes
wireguard 25.04 plucky Ignored see notes
24.10 oracular Ignored end of life, was deferred
24.04 LTS noble Ignored see notes
23.10 mantic Ignored end of life, was deferred
22.04 LTS jammy Ignored see notes
20.04 LTS focal Ignored see notes
18.04 LTS bionic Ignored see notes
16.04 LTS xenial Ignored see notes

Notes

rodrigo-zaiden

other VPN softwares may be affected. as of 2024-05-08, there isn't vpn providers reports

mdeslaur

This issue is actually in the way DHCP clients handle the route option. There is no clear solution to this issue as of 2024-05-14, marking all packages are deferred for now.

nic89

This relies on a victim connecting to an untrusted network with a rogue DHCP server via a DHCP client that implements option 121. It can be mitigated by using namespaces on Linux

ebarretto

It can also be mitigated by disabling option 121 in DHCP configuration

Severity score breakdown

Parameter Value
Base score 7.6 · High
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact Low
Availability impact Low
Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L