Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-35838

Опубликовано: 09 авг. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.7

Описание

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

noble

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

not-affected

esm-apps/xenial

not-affected

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-infra-legacy/trusty

DNE

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/jammy

not-affected

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-infra-legacy/trusty

DNE

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/xenial

not-affected

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

noble

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

esm-infra/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

noble

not-affected

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

noble

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

esm-infra/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

esm-infra/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

noble

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected
mantic

not-affected

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

esm-apps/noble

not-affected

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

ignored

end of life, was not-affected
mantic

not-affected

noble

not-affected

oracular

not-affected

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

lunar

ignored

end of life, was needed
mantic

ignored

end of life, was needed
noble

not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/xenial

not-affected

focal

not-affected

jammy

not-affected

lunar

ignored

end of life, was not-affected

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

ignored

see notes
esm-apps/bionic

ignored

see notes
esm-apps/focal

ignored

see notes
esm-apps/xenial

ignored

see notes
focal

ignored

end of standard support, was ignored [see notes]
jammy

ignored

see notes
lunar

ignored

end of life, was not-affected
mantic

ignored

end of life, was ignored [see notes]
noble

ignored

see notes

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

EPSS

Процентиль: 21%
0.00068
Низкий

5.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.7
nvd
больше 2 лет назад

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.

CVSS3: 5.7
github
больше 2 лет назад

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.

CVSS3: 5.7
fstec
больше 2 лет назад

Уязвимость VPN-сервиса WireGuard, связанная с ошибками при обработке ссылок, позволяющая нарушителю, действующему удаленно, заблокировать IP-трафик на выбранные IP-адреса

EPSS

Процентиль: 21%
0.00068
Низкий

5.7 Medium

CVSS3

Уязвимость CVE-2023-35838