CVE-2022-4968

Published: Jun 7, 2024Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 2.0 / Impact: 4.0

Source: NVD

Description

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

Affected (1)

Products: Canonical: Netplan

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Netplan	Before 1.0.1

Related CWEs

Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (8)

https://bugs.launchpad.net/netplan/+bug/1987842

Source: security@ubuntu.com

Issue TrackingVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2065738

Source: security@ubuntu.com

ExploitIssue TrackingVendor Advisory

https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee

Source: security@ubuntu.com

Patch

https://www.cve.org/CVERecord?id=CVE-2022-4968

Source: security@ubuntu.com

US Government Resource

https://bugs.launchpad.net/netplan/+bug/1987842

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2065738

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://www.cve.org/CVERecord?id=CVE-2022-4968

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.