p PatchFirst

CVE-2025-14551

CVE-2025-14551 · Senstive information disclosure was affecting subiquity

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

CVSS 2.7 · Low · EPSS 0.3%

Published
Updated

Stack: system · python

Affected products and versions

  • ubuntu

    Versions
    • ≥ 0, ≤ 24.04.4: Affected (custom)
    • ≥ 0, ≤ 25.10: Affected (custom)
    • ≥ 0, ≤ 25.04: Affected (custom)

    No fix published

  • subiquity PyPI

    Affected ranges
    • ECOSYSTEM: ≤ 24.04.4

    No fix published

  • subiquity Ubuntu:18.04:LTS

    Versions
    • 0.0.29
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • subiquity Ubuntu:20.04:LTS

    Versions
    • 19.08.1.4
    • 19.12.1.1
    • 19.12.1.1+git71gea8d463f
    • 19.12.2+git106g3d9374ad
    • 20.03.3+git107gb7ae4d06
    • 20.03.3+git147gb34aeda0
    • 20.04.1+git45g5f9fae19
    • 20.04.1+git45g5f9fae19ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • subiquity Ubuntu:22.04:LTS

    Versions
    • 20.04.3+git84g6a5e36ed
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →