Skip to content
OpenAdvisories
Medium USN-6851-1 1 CVE

netplan.io vulnerabilities

Published Jun 26, 2024 · Updated Apr 27, 2026

Summary

Andreas Hasenack discovered that netplan incorrectly handled the permissions
for netdev files containing wireguard configuration. An attacker could use this to obtain
wireguard secret keys.

It was discovered that netplan configuration could be manipulated into injecting
arbitrary commands while setting up network interfaces. An attacker could
use this to execute arbitrary commands or escalate privileges.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS netplan.io 0.104-0ubuntu2~20.04.5
Ubuntu · 22.04 LTS 22.04:LTS netplan.io 0.106.1-7ubuntu0.22.04.3
Ubuntu · 24.04 LTS 24.04:LTS netplan.io 1.0-2ubuntu1.1

Vulnerabilities 1

References

  • report
    https://ubuntu.com/security/CVE-2022-4968
  • report
    https://launchpad.net/bugs/1987842
  • report
    https://launchpad.net/bugs/2065738
  • report
    https://launchpad.net/bugs/2066258