CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, wireguard-go, k3d, kubeflow-katib, grpcurl, terraform-provider-sendgrid, kubeflow...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, hey, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, grpcurl, wireguard-go, kubeflow-fips, kube-state-metrics, kubeflow-katib...

[SECURITY] Fedora 36 Update: wgctrl-0-0.12.20210811git4253848.fc36

Package Wgctrl enables control of WireGuard interfaces on multiple platforms...

Fedora: Security Advisory for wgctrl (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: wgctrl-0-0.11.20210811git4253848.fc35

Package Wgctrl enables control of WireGuard interfaces on multiple platforms...

Fedora: Security Advisory for wgctrl (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: wgctrl-0-0.11.20210811git4253848.fc36

Package Wgctrl enables control of WireGuard interfaces on multiple platforms...

new packages: wireguard-tools

An update is available for wireguard-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GSD-2022-1002029 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1002028 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001759 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001758 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001437 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001436 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001113 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001110 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a potential security problem in the wireguard socket, specifically in the send6 function when IPv6 is disabled. The actual impact and attack plausibility have not yet...

PT-2022-30301

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a potential security problem in the wireguard socket, where a free skb in send6 occurs when ipv6 is disabled. The actual impact and attack plausibility have not yet...

ProtonVPN 1.26.0 - Unquoted Service Path Vulnerability

Exploit Title: ProtonVPN 1.26.0 - Unquoted Service Path Exploit Author: gemreda @gemredax Vendor Homepage: https://protonvpn.com/ Software Link: https://protonvpn.com/ Version: 1.26.0 Tested: Windows 10 x64 Contact: email protected PS C:\Users\Emre sc.exe qc "ProtonVPN Wireguard" SC...

CVE-2022-21132

Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.54 and pfSense-pkg-WireGuard 0.1.6 versions prior to 0.1.61 allows a remote authenticated attacker to lead a pfSense user to view a file outside the public folder...