Search CVE reports
11 – 20 of 36 results
An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN...
31 affected packages
wireguard, connman, gadmin-openvpn-client, gadmin-openvpn-server, golang-github-apparentlymart-go-openvpn-mgmt...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| wireguard | — | Not affected | Not affected | Not affected | Not affected |
| connman | — | Not affected | Not affected | Not affected | Not affected |
| gadmin-openvpn-client | — | Not in release | Not in release | Not affected | Not affected |
| gadmin-openvpn-server | — | Not in release | Not in release | Not affected | Not affected |
| golang-github-apparentlymart-go-openvpn-mgmt | — | Not affected | Not affected | Not affected | Not in release |
| kvpnc | — | Not in release | Not in release | Not in release | Not affected |
| l2tp-ipsec-vpn | — | Not in release | Not in release | Not in release | Not in release |
| l2tp-ipsec-vpn-daemon | — | Not in release | Not in release | Not in release | Not in release |
| libreswan | — | Not affected | Not affected | Not affected | Not affected |
| mozillavpn | — | Not in release | Not affected | Not in release | Not in release |
| n2n | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-fortisslvpn | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-iodine | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-l2tp | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-openconnect | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-openvpn | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-pptp | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-sstp | — | Not affected | Not affected | Not in release | Not in release |
| network-manager-strongswan | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-vpnc | — | Not affected | Not affected | Not affected | Not affected |
| openconnect | — | Not affected | Not affected | Not affected | Not affected |
| openfortivpn | — | Not affected | Not affected | Not affected | Not affected |
| openvpn | — | Not affected | Not affected | Not affected | Not affected |
| pptp-linux | — | Not affected | Not affected | Not affected | Not affected |
| quicktun | — | Not affected | Not affected | Not affected | Not affected |
| riseup-vpn | — | Not affected | Not in release | Not in release | Not in release |
| softether-vpn | — | Not affected | Not affected | Not in release | Not in release |
| sshuttle | — | Not affected | Not affected | Not affected | Not affected |
| tinc | — | Not affected | Not affected | Not affected | Not affected |
| vpnc | — | Not affected | Not affected | Not affected | Not affected |
| zentyal-openvpn | — | Not in release | Not in release | Not in release | Not in release |
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into...
31 affected packages
wireguard, connman, gadmin-openvpn-client, gadmin-openvpn-server, golang-github-apparentlymart-go-openvpn-mgmt...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| wireguard | — | Ignored | Ignored | Ignored | Ignored |
| connman | — | Not affected | Not affected | Not affected | Not affected |
| gadmin-openvpn-client | — | Not in release | Not in release | Not affected | Not affected |
| gadmin-openvpn-server | — | Not in release | Not in release | Not affected | Not affected |
| golang-github-apparentlymart-go-openvpn-mgmt | — | Not affected | Not affected | Not affected | Not in release |
| kvpnc | — | Not in release | Not in release | Not in release | Not affected |
| l2tp-ipsec-vpn | — | Not in release | Not in release | Not in release | Not in release |
| l2tp-ipsec-vpn-daemon | — | Not in release | Not in release | Not in release | Not in release |
| libreswan | — | Not affected | Not affected | Not affected | Not affected |
| mozillavpn | — | Not in release | Not affected | Not in release | Not in release |
| n2n | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-fortisslvpn | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-iodine | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-l2tp | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-openconnect | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-openvpn | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-pptp | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-sstp | — | Not affected | Not affected | Not in release | Not in release |
| network-manager-strongswan | — | Not affected | Not affected | Not affected | Not affected |
| network-manager-vpnc | — | Not affected | Not affected | Not affected | Not affected |
| openconnect | — | Not affected | Not affected | Not affected | Not affected |
| openfortivpn | — | Not affected | Not affected | Not affected | Not affected |
| openvpn | — | Not affected | Not affected | Not affected | Not affected |
| pptp-linux | — | Not affected | Not affected | Not affected | Not affected |
| quicktun | — | Not affected | Not affected | Not affected | Not affected |
| riseup-vpn | — | Not affected | Not in release | Not in release | Not in release |
| softether-vpn | — | Not affected | Not affected | Not in release | Not in release |
| sshuttle | — | Not affected | Not affected | Not affected | Not affected |
| tinc | — | Not affected | Not affected | Not affected | Not affected |
| vpnc | — | Not affected | Not affected | Not affected | Not affected |
| zentyal-openvpn | — | Not in release | Not in release | Not in release | Not in release |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | — | — | Not affected | Not affected | Not affected |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | — | — | Not affected | Not affected | Not affected |
A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | — | — | — | Not affected | Not affected |
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile,...
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | — | — | — | Not affected | Not affected |
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
1 affected package
network-manager-ssh
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-ssh | Not affected | Not affected | Not affected | Not affected | Vulnerable |
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | — | — | — | — | — |
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
2 affected packages
network-manager, systemd
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | — | — | — | — | Fixed |
| systemd | — | — | — | — | Fixed |