Search CVE reports
1 – 10 of 42 results
The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket_buf without checking the available space and without...
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing...
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[Incomplete fix of CVE-2018-10900]
1 affected package
network-manager-vpnc
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-vpnc | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[username newline injection reaches a root password helper]
1 affected package
network-manager-vpnc
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-vpnc | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[credential newline injection permits local root code execution]
1 affected package
network-manager-fortisslvpn
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-fortisslvpn | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[profile data reaches root pppd pty shell]
1 affected package
network-manager-sstp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-sstp | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
[network-manager-iodine: Option confusion reaches iodine's pre-drop root shell]
1 affected package
network-manager-iodine
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-iodine | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets values) unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged...
1 affected package
network-manager-l2tp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager-l2tp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private...
1 affected package
network-manager
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| network-manager | Fixed | Not affected | Not affected | Not affected | Not affected |