{"id":"CVE-2022-4968","details":"netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.","modified":"2026-04-12T08:34:13.411507Z","published":"2024-06-07T01:15:49.463Z","references":[{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2022-4968"},{"type":"REPORT","url":"https://bugs.launchpad.net/netplan/+bug/1987842"},{"type":"REPORT","url":"https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2065738"},{"type":"FIX","url":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/canonical/netplan","events":[{"introduced":"0"},{"fixed":"3a7516aadaf864ee9d04727977d3d9fd1bccbbda"},{"fixed":"4c39b75b5c6ae7d976bda6da68da60d9a7f085ee"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"1.0.1"}]}}],"versions":["0.1","0.10","0.100","0.101","0.102","0.103","0.104","0.105","0.106","0.107","0.11","0.11.1","0.12","0.13","0.14","0.15","0.16","0.17","0.18","0.19","0.2","0.21","0.22","0.23","0.24","0.25","0.26","0.27","0.28","0.29","0.3","0.30","0.31","0.32","0.33","0.34","0.34.1","0.35","0.36","0.36.1","0.37","0.37.1","0.38","0.39","0.4","0.40","0.40.1","0.40.2","0.5","0.6","0.7","0.8","0.9","0.90","0.95","0.96","0.96.1","0.97","0.98","0.99","1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4968.json","vanir_signatures":[{"target":{"file":"src/openvswitch.c","function":"write_ovs_systemd_unit"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":1677,"function_hash":"82787928688185668663570404593663670635"},"id":"CVE-2022-4968-0f9f4879","signature_version":"v1"},{"target":{"file":"src/nm.c","function":"netplan_state_finish_nm_write"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":2651,"function_hash":"168386177492744147773167494566421711473"},"id":"CVE-2022-4968-22a2a9ed","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"write_rules_file"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":826,"function_hash":"277694678244329833026210692397751985659"},"id":"CVE-2022-4968-2c8c4a17","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"write_regdom"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":967,"function_hash":"180401597917669920761348139970244353546"},"id":"CVE-2022-4968-31a7de4a","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"write_wpa_unit"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":973,"function_hash":"164829391759409399725749623044691513539"},"id":"CVE-2022-4968-3365cd60","signature_version":"v1"},{"target":{"file":"src/networkd.c"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Line","digest":{"line_hashes":["54807154879713170955874942669754693835","199529621206514126262173739716397873524","103225351712909360787334410355874202350","236209350318105486656812699911844257559","44572536574162937596432624064992217804","170859344973966021569133764165289041071","69847061735787482661681932416131874076","217321914621353760008300918046868720182","172648251508402442289261304325140703757","167731390831736905036098000643203320528","232158910306489535005762707791895581553","304395946744527470957300863569428444307","255504444744929702205634759176646360414","320037620078286951241319343738531604596","28909644077535022936342109568298469979","164755460099985577346509838885447493756","114765402583733866200250392295330592666","171360206623130075128993825123357803860","809337392126615892640973500556919085","70150485711455617735509899587983006769","135655252063575764162610951382263533892","292504181505738982310642075439579466173","198602565975471466083424664359426096515","206669814606437647357807777432721205825","52362780468471673510632419537771766489","291175808554110812153592971386945997592","177097733803539212911228176908484943153","227929064954185166049038492099046114377","169893416807158462747495059867034688041","245759165329237357585472896459440495021","306804199876923555891542164288523159268","11288761091470557491356407832958863623","76948448303216569547333625629624186899","221188137923380717785346362765157119666","282709347166180686180466022787147779139","66338154143065477145007310393858561244","282958144189904052537276184941913322528","224662355013165066585003182041206604382","208915648834056592632816167183607757744","318131035829176901496701197579352326653","240894036827102162836402891874987721856","280642314092776984650296381721966754986","152688619203932204440038666043743626776","19012125599622466681182187341905813182","109739638156912124084407869664129876572","73417970294257481774043714734567264838","299094094051702290457856041793376345304","16513423428028136153230346992807383505","274365913386798359991557572320101359330","63563613734806661407657713441252045333","325222042438071406151285293233374672730","280642314092776984650296381721966754986","152688619203932204440038666043743626776","220662692948928345487498301794698192010","43280256529500110078112361158442769373","73009796899011260295972387579061805296","326583688550784394804648136407719613756","138615927944912625912709665465733352887","82631476978667758819750326400786037049","248959006966672352809349836955767074913","52070159584435872000710326740596965745","79593152650311913066302200453819257609","262647936206698930477407866460993302961","250201277128862751952307228578125455319","310356557019651936091959318179688731043","139971201449385580003468586872975858168","160744511466058697456602796101939636929","76826509976837180112660826606006955419","171226082591938604505483126316284861186","263608654855684824261279175584583767181","76310535692460083302701011677938969464","137118333512421007489594934220989778666"],"threshold":0.9},"id":"CVE-2022-4968-3e6dc4c5","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"_netplan_networkd_write_wait_online"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":2148,"function_hash":"281059721733370568033152063356474265534"},"id":"CVE-2022-4968-4299ed03","signature_version":"v1"},{"target":{"file":"src/util.c"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Line","digest":{"line_hashes":["247638403297937670696632157956203082633","133148097306726715381652891544486582404","52504573784148424606243719991417868934","33586031029726928238857110982638141179","127173502267962469086537298094845149753","201563724220652943609701707714496507806","157548609964263835072880075711136428601"],"threshold":0.9},"id":"CVE-2022-4968-4e335453","signature_version":"v1"},{"target":{"file":"src/util-internal.h"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Line","digest":{"line_hashes":["325475204685906535092110023792274879795","336329661279119073850602700531347044267","227321045622010564201676928730862523910"],"threshold":0.9},"id":"CVE-2022-4968-5daaa97e","signature_version":"v1"},{"target":{"file":"src/openvswitch.c"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Line","digest":{"line_hashes":["60265606642485618291242509152241836457","90092501602958499978249988239379793929","202716817831180361412406550781243861453","320037620078286951241319343738531604596"],"threshold":0.9},"id":"CVE-2022-4968-5f959b3b","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"write_link_file"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":2802,"function_hash":"237944957482783084438216738738053796003"},"id":"CVE-2022-4968-6308e2e1","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"_netplan_netdef_write_network_file"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":9612,"function_hash":"228410200944544002460421187532964626752"},"id":"CVE-2022-4968-7b44765b","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"write_netdev_file"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":2577,"function_hash":"162033120726895291296149249735202311285"},"id":"CVE-2022-4968-7eded4e9","signature_version":"v1"},{"target":{"file":"src/sriov.c","function":"write_sriov_rebind_systemd_unit"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":1263,"function_hash":"168168144129640448176862910179612406109"},"id":"CVE-2022-4968-a6b77ec0","signature_version":"v1"},{"target":{"file":"src/networkd.c","function":"write_wpa_conf"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":2821,"function_hash":"45974544479259572499631944964191562292"},"id":"CVE-2022-4968-b8dde8fe","signature_version":"v1"},{"target":{"file":"src/sriov.c","function":"write_sriov_apply_systemd_unit"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Function","digest":{"length":1099,"function_hash":"34698203537911072462691376686362037615"},"id":"CVE-2022-4968-e18b7da9","signature_version":"v1"},{"target":{"file":"src/nm.c"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Line","digest":{"line_hashes":["46397231215020294818157655977746015333","141360964291982820044809397822704486744","249130086307385270761725224764326889301","298339980085335464746884187416037721365","327196745376221679720830820008991788843","25841184173688092602011664478594788110","132157919748123651958326227846144534893","304260914033819067875299667922247360789"],"threshold":0.9},"id":"CVE-2022-4968-e2836e92","signature_version":"v1"},{"target":{"file":"src/sriov.c"},"source":"https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee","deprecated":false,"signature_type":"Line","digest":{"line_hashes":["35639562848524905769645155283018093811","74659549731326499284739354179251516118","1477849654779608290071602512535623143","47409074524754466651249567460399487261","215497776288230246924655705492781304785","126188823804329788748225574640701378926","150017175022065442564941383583343414746","7719085184017284249709796378744027185"],"threshold":0.9},"id":"CVE-2022-4968-f7ad3d4f","signature_version":"v1"}],"vanir_signatures_modified":"2026-04-12T08:34:13Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"}]}