Summary
Andreas Hasenack discovered that netplan incorrectly handled the permissions
for netdev files containing wireguard configuration. An attacker could use this to obtain
wireguard secret keys.
It was discovered that netplan configuration could be manipulated into injecting
arbitrary commands while setting up network interfaces. An attacker could
use this to execute arbitrary commands or escalate privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | netplan.io | 0.104-0ubuntu2~20.04.5 |
| Ubuntu · 22.04 LTS 22.04:LTS | netplan.io | 0.106.1-7ubuntu0.22.04.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | netplan.io | 1.0-2ubuntu1.1 |
Vulnerabilities 1
-
Medium 6.5
netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.