Vulnerability Details CVE-2024-11584
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.5%
CVSS Severity
CVSS v3 Score 5.9
References
Products affected by CVE-2024-11584
-
cpe:2.3:a:canonical:cloud-init:0.5.0
-
cpe:2.3:a:canonical:cloud-init:0.5.1
-
cpe:2.3:a:canonical:cloud-init:0.5.10
-
cpe:2.3:a:canonical:cloud-init:0.5.11
-
cpe:2.3:a:canonical:cloud-init:0.5.12
-
cpe:2.3:a:canonical:cloud-init:0.5.13
-
cpe:2.3:a:canonical:cloud-init:0.5.14
-
cpe:2.3:a:canonical:cloud-init:0.5.15
-
cpe:2.3:a:canonical:cloud-init:0.5.2
-
cpe:2.3:a:canonical:cloud-init:0.5.3
-
cpe:2.3:a:canonical:cloud-init:0.5.4
-
cpe:2.3:a:canonical:cloud-init:0.5.5
-
cpe:2.3:a:canonical:cloud-init:0.5.6
-
cpe:2.3:a:canonical:cloud-init:0.5.8
-
cpe:2.3:a:canonical:cloud-init:0.6.0
-
cpe:2.3:a:canonical:cloud-init:0.6.1
-
cpe:2.3:a:canonical:cloud-init:0.6.2
-
cpe:2.3:a:canonical:cloud-init:0.6.3
-
cpe:2.3:a:canonical:cloud-init:0.7.0
-
cpe:2.3:a:canonical:cloud-init:0.7.1
-
cpe:2.3:a:canonical:cloud-init:0.7.2
-
cpe:2.3:a:canonical:cloud-init:0.7.3
-
cpe:2.3:a:canonical:cloud-init:0.7.4
-
cpe:2.3:a:canonical:cloud-init:0.7.5
-
cpe:2.3:a:canonical:cloud-init:0.7.6
-
cpe:2.3:a:canonical:cloud-init:0.7.7
-
cpe:2.3:a:canonical:cloud-init:0.7.8
-
cpe:2.3:a:canonical:cloud-init:0.7.9
-
cpe:2.3:a:canonical:cloud-init:17.1
-
cpe:2.3:a:canonical:cloud-init:17.2
-
cpe:2.3:a:canonical:cloud-init:18.1
-
cpe:2.3:a:canonical:cloud-init:18.2
-
cpe:2.3:a:canonical:cloud-init:18.3
-
cpe:2.3:a:canonical:cloud-init:18.4
-
cpe:2.3:a:canonical:cloud-init:19.1
-
cpe:2.3:a:canonical:cloud-init:19.2
-
cpe:2.3:a:canonical:cloud-init:19.3
-
cpe:2.3:a:canonical:cloud-init:19.4
-
cpe:2.3:a:canonical:cloud-init:20.1
-
cpe:2.3:a:canonical:cloud-init:20.2
-
cpe:2.3:a:canonical:cloud-init:20.3
-
cpe:2.3:a:canonical:cloud-init:20.4
-
cpe:2.3:a:canonical:cloud-init:20.4.1
-
cpe:2.3:a:canonical:cloud-init:21.1
-
cpe:2.3:a:canonical:cloud-init:21.2
-
cpe:2.3:a:canonical:cloud-init:21.3
-
cpe:2.3:a:canonical:cloud-init:21.4
-
cpe:2.3:a:canonical:cloud-init:22.1
-
cpe:2.3:a:canonical:cloud-init:22.2
-
cpe:2.3:a:canonical:cloud-init:22.2.1
-
cpe:2.3:a:canonical:cloud-init:22.2.2
-
cpe:2.3:a:canonical:cloud-init:22.3
-
cpe:2.3:a:canonical:cloud-init:22.3.1
-
cpe:2.3:a:canonical:cloud-init:22.3.2
-
cpe:2.3:a:canonical:cloud-init:22.3.3
-
cpe:2.3:a:canonical:cloud-init:22.3.4
-
cpe:2.3:a:canonical:cloud-init:22.4
-
cpe:2.3:a:canonical:cloud-init:22.4.1
-
cpe:2.3:a:canonical:cloud-init:22.4.2
-
cpe:2.3:a:canonical:cloud-init:23.1
-
cpe:2.3:a:canonical:cloud-init:23.1.1
-
cpe:2.3:a:canonical:cloud-init:23.1.2
-
cpe:2.3:a:canonical:cloud-init:23.2
-
cpe:2.3:a:canonical:cloud-init:23.2.1
-
cpe:2.3:a:canonical:cloud-init:23.2.2
-
cpe:2.3:a:canonical:cloud-init:23.3
-
cpe:2.3:a:canonical:cloud-init:23.3.1
-
cpe:2.3:a:canonical:cloud-init:23.3.2
-
cpe:2.3:a:canonical:cloud-init:23.3.3
-
cpe:2.3:a:canonical:cloud-init:23.4
-
cpe:2.3:a:canonical:cloud-init:23.4.1
-
cpe:2.3:a:canonical:cloud-init:23.4.2
-
cpe:2.3:a:canonical:cloud-init:23.4.3
-
cpe:2.3:a:canonical:cloud-init:23.4.4
-
cpe:2.3:a:canonical:cloud-init:24.1
-
cpe:2.3:a:canonical:cloud-init:24.1.1
-
cpe:2.3:a:canonical:cloud-init:24.1.2
-
cpe:2.3:a:canonical:cloud-init:24.1.3
-
cpe:2.3:a:canonical:cloud-init:24.1.4
-
cpe:2.3:a:canonical:cloud-init:24.1.5
-
cpe:2.3:a:canonical:cloud-init:24.1.6
-
cpe:2.3:a:canonical:cloud-init:24.2
-
cpe:2.3:a:canonical:cloud-init:24.3
-
cpe:2.3:a:canonical:cloud-init:24.3.1
-
cpe:2.3:a:canonical:cloud-init:24.4
-
cpe:2.3:a:canonical:cloud-init:24.4.1
-
cpe:2.3:a:canonical:cloud-init:25.1
-
cpe:2.3:a:canonical:cloud-init:25.1.1
-
cpe:2.3:a:canonical:cloud-init:25.1.2