Search CVE reports
1 – 10 of 41 results
[Incomplete fix of CVE-2018-10900]
1 affected package
network-manager-vpnc
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-vpnc | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[username newline injection reaches a root password helper]
1 affected package
network-manager-vpnc
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-vpnc | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[credential newline injection permits local root code execution]
1 affected package
network-manager-fortisslvpn
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-fortisslvpn | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[profile data reaches root pppd pty shell]
1 affected package
network-manager-sstp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-sstp | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
[network-manager-iodine: Option confusion reaches iodine's pre-drop root shell]
1 affected package
network-manager-iodine
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-iodine | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets values) unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged...
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private...
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw...
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |