GSD-2022-1006561 wireguard: netlink: avoid variable-sized memcpy on sockaddr

wireguard: netlink: avoid variable-sized memcpy on sockaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006521 wireguard: netlink: avoid variable-sized memcpy on sockaddr

wireguard: netlink: avoid variable-sized memcpy on sockaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006477 wireguard: netlink: avoid variable-sized memcpy on sockaddr

wireguard: netlink: avoid variable-sized memcpy on sockaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

PT-2022-34777 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue concerns a potential security vulnerability in the Linux Kernel related to the wireguard netlink, specifically involving a variable-sized memcpy on sockaddr. The actual impact and...

PT-2022-34817 · Wireguard +1 · Wireguard +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue concerns a potential security vulnerability in the netlink component of WireGuard, related to a variable-sized memcpy on sockaddr. The actual impact and attack plausibility have n...

GSD-2022-1005866 wireguard: allowedips: don't corrupt stack when detecting overflow

wireguard: allowedips: don't corrupt stack when detecting overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005615 wireguard: allowedips: don't corrupt stack when detecting overflow

wireguard: allowedips: don't corrupt stack when detecting overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33873 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Wireguard versions prior to v5.15.61 Description: The issue is related to the allowedips feature in Wireguard, where a potential stack corruption can occur when detecting an overflow. The actual impact and attack plausibility have not yet bee...

PT-2022-34124 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: wireguard versions prior to v5.10.137 Description: The issue is related to the allowedips feature in wireguard, where a stack corruption can occur when detecting an overflow. The actual impact and attack plausibility have not yet been proven...

GSD-2022-1005268 wireguard: allowedips: don't corrupt stack when detecting overflow

wireguard: allowedips: don't corrupt stack when detecting overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33526 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: wireguard versions prior to v5.19.2 Description: The issue is related to the allowedips feature in wireguard, where a stack corruption can occur when detecting an overflow. The actual impact and attack plausibility have not yet been proven...

Authorization

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

CVE-2022-36110

Netmaker (WireGuard-based networking) is affected by an improper authorization issue prior to v0.15.1, where non-admin users could perform admin-level API calls using their auth tokens. Root cause: insufficient granularity of access control allowing privilege escalation via the API. Impact per so...

CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: k3d, kubeflow, wireguard-go, terraform-provider-sendgrid, kubeflow-katib, dynamic-localpv-provisioner, hey, grpcurl...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, wireguard-go, kubeflow, grpcurl, hey, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-katib, k3d, kube-state-metrics, kubeflow-fips...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: k3d, kubeflow, wireguard-go, terraform-provider-sendgrid, kubeflow-katib, dynamic-localpv-provisioner, hey, grpcurl...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, wireguard-go, kubeflow, grpcurl, hey, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-katib, k3d, kube-state-metrics, kubeflow-fips...