CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@ubuntu.com

Published

2024-06-07

Last modified

2024-08-03

Weaknesses

CWE-497

Affected products

• Netplan (Canonical)
• Netplan (Canonical Ltd.)

References

• https://bugs.launchpad.net/netplan/+bug/1987842
• https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2065738
• https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee
• https://www.cve.org/CVERecord?id=CVE-2022-4968