CVE-2022-4968

2024-06-0701:15:49

Debian Security Bug Tracker

security-tracker.debian.org

netplan

wireguard

private key

security fix

unix

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

Percentile

15.5%

JSON

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

OSVersionArchitecturePackageVersionFilename
Debian12allnetplan.io<= 0.106-2+deb12u1netplan.io_0.106-2+deb12u1_all.deb
Debian11allnetplan.io<= 0.101-4netplan.io_0.101-4_all.deb
Debian999allnetplan.io< 1.0.1-1netplan.io_1.0.1-1_all.deb
Debian13allnetplan.io< 1.0.1-1netplan.io_1.0.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	netplan.io	<= 0.106-2+deb12u1	netplan.io_0.106-2+deb12u1_all.deb
Debian	11	all	netplan.io	<= 0.101-4	netplan.io_0.101-4_all.deb
Debian	999	all	netplan.io	< 1.0.1-1	netplan.io_1.0.1-1_all.deb
Debian	13	all	netplan.io	< 1.0.1-1	netplan.io_1.0.1-1_all.deb