https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:05:36 +0000 https://vulnerability.circl.lu/vuln/cve-2024-6174 <p><strong>Affected:</strong> Canonical cloud-init</p> <p>When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.</p> <p><strong>Affected:</strong> Canonical cloud-init</p> <p>When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.</p> https://vulnerability.circl.lu/vuln/cve-2024-6174 https://vulnerability.circl.lu/vuln/usn-7677-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cloud-init, Ubuntu:Pro:18.04:LTS: cloud-init, Ubuntu:Pro:20.04:LTS: cloud-init, Ubuntu:22.04:LTS: cloud-init, Ubuntu:24.04:LTS: cloud-init</p> <p>Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to send hotplug-hook commands. (CVE-2024-11584)</p> <p>It was discovered that cloud-init granted root access to a hardcoded URL with a local IP address when a non-x86 platform is detected. An attacker could possibly impersonate an OpenStack endpoint and provide root configuration data. (CVE-2024-6174)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cloud-init, Ubuntu:Pro:18.04:LTS: cloud-init, Ubuntu:Pro:20.04:LTS: cloud-init, Ubuntu:22.04:LTS: cloud-init, Ubuntu:24.04:LTS: cloud-init</p> <p>Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to send hotplug-hook commands. (CVE-2024-11584)</p> <p>It was discovered that cloud-init granted root access to a hardcoded URL with a local IP address when a non-x86 platform is detected. An attacker could possibly impersonate an OpenStack endpoint and provide root configuration data. (CVE-2024-6174)</p> https://vulnerability.circl.lu/vuln/usn-7677-1