Vulnerability · Published Jan 31, 2025 · Assigned by canonical
CVE-2022-1736
Critical 9.8
In plain English
A critical-severity security flaw in Ubuntu's gnome-control-center from Canonical Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.7%top 45.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | gnome-remote-desktop | 42.1.1-2 | DEBIAN-CVE-2022-1736 |
| Debian:13 | gnome-remote-desktop | 42.1.1-2 | DEBIAN-CVE-2022-1736 |
| Debian:14 | gnome-remote-desktop | 42.1.1-2 | DEBIAN-CVE-2022-1736 |
| Ubuntu:22.04:LTS | gnome-control-center | 1:41.4-1ubuntu13.2 | USN-5430-1 |
| Ubuntu:22.04:LTS | gnome-control-center | 1:41.4-1ubuntu13.2 | UBUNTU-CVE-2022-1736 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd. | Ubuntu's gnome-control-center | 0 – before 42.1.1-2ubuntu1 |
References
- https://ubuntu.com/security/notices/USN-5430-1 vendor-advisory
- https://bugs.launchpad.net/ubuntu/+source/gnome-remote-desktop/+bug/1973028 issue-tracking
- https://ubuntu.com/security/CVE-2022-1736 issue-tracking