CVE-2020-8632

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-03/msg00042.html · Mailing List
• bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1860795 · Issue Tracking
• canonical/cloud-init#189 · Patch
• lists.debian.org/debian-lts-announce/2020/02/msg00021.html · Mailing List

cloud-init のその他の脆弱性

• CVE-2024-6174高 8.8When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init d…
• CVE-2024-11584中 5.3cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, …
• CVE-2023-1786中 5.5Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords…
• CVE-2022-2084中 5.5Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could …
• CVE-2021-3429中 5.5When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-rea…