CVE-2018-1000135

Name of the Vulnerable Software and Affected Versions: GNOME NetworkManager version 1.10.2 and earlier

Description: The issue is related to an information exposure in the DNS resolver of GNOME NetworkManager, which can lead to private DNS queries being leaked to local network's DNS servers while on VPN. This is due to a lack of protection for service data. An attacker could exploit this to gain unauthorized access to information.

Recommendations: For GNOME NetworkManager version 1.10.2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.