CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: grpcurl, hey, wireguard-go, k3d, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, kubeflow-katib...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, k3d, grpcurl, dynamic-localpv-provisioner, terraform-provider-sendgrid, wireguard-go, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, hey, kubeflow-katib, kubeflow-fips, kubeflow...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: grpcurl, hey, wireguard-go, k3d, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, kubeflow-katib...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, k3d, grpcurl, dynamic-localpv-provisioner, terraform-provider-sendgrid, wireguard-go, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, hey, kubeflow-katib, kubeflow-fips, kubeflow...

[SECURITY] Fedora 36 Update: wgctrl-0-0.12.20210811git4253848.fc36

Package Wgctrl enables control of WireGuard interfaces on multiple platforms...

Fedora: Security Advisory for wgctrl (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: wgctrl-0-0.11.20210811git4253848.fc35

Package Wgctrl enables control of WireGuard interfaces on multiple platforms...

Fedora: Security Advisory for wgctrl (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: wgctrl-0-0.11.20210811git4253848.fc36

Package Wgctrl enables control of WireGuard interfaces on multiple platforms...

new packages: wireguard-tools

An update is available for wireguard-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GSD-2022-1002029 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1002028 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001759 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001758 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001437 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001436 wireguard: socket: ignore v6 endpoints when ipv6 is disabled

wireguard: socket: ignore v6 endpoints when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001113 wireguard: socket: free skb in send6 when ipv6 is disabled

wireguard: socket: free skb in send6 when ipv6 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...