Skip to content
OpenAdvisories
Medium USN-5636-1 1 CVE

sosreport vulnerability

Published Sep 26, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that SoS incorrectly handled certain data.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS sosreport 4.3-1ubuntu0.18.04.2
Ubuntu · 20.04 LTS 20.04:LTS sosreport 4.3-1ubuntu0.20.04.2
Ubuntu · 22.04 LTS 22.04:LTS sosreport 4.3-1ubuntu2.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS sosreport 3.5-1~ubuntu14.04.3+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS sosreport 3.9.1-1ubuntu0.16.04.2+esm1

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-2806

    sosreport Exposure of Sensitive Information vulnerability

    It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

    sosreport sosreport sos Ubuntu Azure Linux PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-2806