CL
Product
cloud-init
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 0
Watch
Add cloud-init to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6174 | 8.8 | Jun 26 | When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address Affected: before 25.1.3 |
| CVE-2012-6639 | 8.8 | Nov 25 | An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data Affected: before 0.7.0 |
| CVE-2018-10896 | 7.1 | Aug 1 | The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys Affected: 0.6.2 |
Showing 3