CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.5%

CVSS Severity

CVSS v3 Score 8.8

References

https://github.com/canonical/cloud-init/releases/tag/25.1.3

Products affected by CVE-2024-6174

Canonical » Cloud-Init » Version: 0.5.0

cpe:2.3:a:canonical:cloud-init:0.5.0
Canonical » Cloud-Init » Version: 0.5.1

cpe:2.3:a:canonical:cloud-init:0.5.1
Canonical » Cloud-Init » Version: 0.5.10

cpe:2.3:a:canonical:cloud-init:0.5.10
Canonical » Cloud-Init » Version: 0.5.11

cpe:2.3:a:canonical:cloud-init:0.5.11
Canonical » Cloud-Init » Version: 0.5.12

cpe:2.3:a:canonical:cloud-init:0.5.12
Canonical » Cloud-Init » Version: 0.5.13

cpe:2.3:a:canonical:cloud-init:0.5.13
Canonical » Cloud-Init » Version: 0.5.14

cpe:2.3:a:canonical:cloud-init:0.5.14
Canonical » Cloud-Init » Version: 0.5.15

cpe:2.3:a:canonical:cloud-init:0.5.15
Canonical » Cloud-Init » Version: 0.5.2

cpe:2.3:a:canonical:cloud-init:0.5.2
Canonical » Cloud-Init » Version: 0.5.3

cpe:2.3:a:canonical:cloud-init:0.5.3
Canonical » Cloud-Init » Version: 0.5.4

cpe:2.3:a:canonical:cloud-init:0.5.4
Canonical » Cloud-Init » Version: 0.5.5

cpe:2.3:a:canonical:cloud-init:0.5.5
Canonical » Cloud-Init » Version: 0.5.6

cpe:2.3:a:canonical:cloud-init:0.5.6
Canonical » Cloud-Init » Version: 0.5.8

cpe:2.3:a:canonical:cloud-init:0.5.8
Canonical » Cloud-Init » Version: 0.6.0

cpe:2.3:a:canonical:cloud-init:0.6.0
Canonical » Cloud-Init » Version: 0.6.1

cpe:2.3:a:canonical:cloud-init:0.6.1
Canonical » Cloud-Init » Version: 0.6.2

cpe:2.3:a:canonical:cloud-init:0.6.2
Canonical » Cloud-Init » Version: 0.6.3

cpe:2.3:a:canonical:cloud-init:0.6.3
Canonical » Cloud-Init » Version: 0.7.0

cpe:2.3:a:canonical:cloud-init:0.7.0
Canonical » Cloud-Init » Version: 0.7.1

cpe:2.3:a:canonical:cloud-init:0.7.1
Canonical » Cloud-Init » Version: 0.7.2

cpe:2.3:a:canonical:cloud-init:0.7.2
Canonical » Cloud-Init » Version: 0.7.3

cpe:2.3:a:canonical:cloud-init:0.7.3
Canonical » Cloud-Init » Version: 0.7.4

cpe:2.3:a:canonical:cloud-init:0.7.4
Canonical » Cloud-Init » Version: 0.7.5

cpe:2.3:a:canonical:cloud-init:0.7.5
Canonical » Cloud-Init » Version: 0.7.6

cpe:2.3:a:canonical:cloud-init:0.7.6
Canonical » Cloud-Init » Version: 0.7.7

cpe:2.3:a:canonical:cloud-init:0.7.7
Canonical » Cloud-Init » Version: 0.7.8

cpe:2.3:a:canonical:cloud-init:0.7.8
Canonical » Cloud-Init » Version: 0.7.9

cpe:2.3:a:canonical:cloud-init:0.7.9
Canonical » Cloud-Init » Version: 17.1

cpe:2.3:a:canonical:cloud-init:17.1
Canonical » Cloud-Init » Version: 17.2

cpe:2.3:a:canonical:cloud-init:17.2
Canonical » Cloud-Init » Version: 18.1

cpe:2.3:a:canonical:cloud-init:18.1
Canonical » Cloud-Init » Version: 18.2

cpe:2.3:a:canonical:cloud-init:18.2
Canonical » Cloud-Init » Version: 18.3

cpe:2.3:a:canonical:cloud-init:18.3
Canonical » Cloud-Init » Version: 18.4

cpe:2.3:a:canonical:cloud-init:18.4
Canonical » Cloud-Init » Version: 19.1

cpe:2.3:a:canonical:cloud-init:19.1
Canonical » Cloud-Init » Version: 19.2

cpe:2.3:a:canonical:cloud-init:19.2
Canonical » Cloud-Init » Version: 19.3

cpe:2.3:a:canonical:cloud-init:19.3
Canonical » Cloud-Init » Version: 19.4

cpe:2.3:a:canonical:cloud-init:19.4
Canonical » Cloud-Init » Version: 20.1

cpe:2.3:a:canonical:cloud-init:20.1
Canonical » Cloud-Init » Version: 20.2

cpe:2.3:a:canonical:cloud-init:20.2
Canonical » Cloud-Init » Version: 20.3

cpe:2.3:a:canonical:cloud-init:20.3
Canonical » Cloud-Init » Version: 20.4

cpe:2.3:a:canonical:cloud-init:20.4
Canonical » Cloud-Init » Version: 20.4.1

cpe:2.3:a:canonical:cloud-init:20.4.1
Canonical » Cloud-Init » Version: 21.1

cpe:2.3:a:canonical:cloud-init:21.1
Canonical » Cloud-Init » Version: 21.2

cpe:2.3:a:canonical:cloud-init:21.2
Canonical » Cloud-Init » Version: 21.3

cpe:2.3:a:canonical:cloud-init:21.3
Canonical » Cloud-Init » Version: 21.4

cpe:2.3:a:canonical:cloud-init:21.4
Canonical » Cloud-Init » Version: 22.1

cpe:2.3:a:canonical:cloud-init:22.1
Canonical » Cloud-Init » Version: 22.2

cpe:2.3:a:canonical:cloud-init:22.2
Canonical » Cloud-Init » Version: 22.2.1

cpe:2.3:a:canonical:cloud-init:22.2.1
Canonical » Cloud-Init » Version: 22.2.2

cpe:2.3:a:canonical:cloud-init:22.2.2
Canonical » Cloud-Init » Version: 22.3

cpe:2.3:a:canonical:cloud-init:22.3
Canonical » Cloud-Init » Version: 22.3.1

cpe:2.3:a:canonical:cloud-init:22.3.1
Canonical » Cloud-Init » Version: 22.3.2

cpe:2.3:a:canonical:cloud-init:22.3.2
Canonical » Cloud-Init » Version: 22.3.3

cpe:2.3:a:canonical:cloud-init:22.3.3
Canonical » Cloud-Init » Version: 22.3.4

cpe:2.3:a:canonical:cloud-init:22.3.4
Canonical » Cloud-Init » Version: 22.4

cpe:2.3:a:canonical:cloud-init:22.4
Canonical » Cloud-Init » Version: 22.4.1

cpe:2.3:a:canonical:cloud-init:22.4.1
Canonical » Cloud-Init » Version: 22.4.2

cpe:2.3:a:canonical:cloud-init:22.4.2
Canonical » Cloud-Init » Version: 23.1

cpe:2.3:a:canonical:cloud-init:23.1
Canonical » Cloud-Init » Version: 23.1.1

cpe:2.3:a:canonical:cloud-init:23.1.1
Canonical » Cloud-Init » Version: 23.1.2

cpe:2.3:a:canonical:cloud-init:23.1.2
Canonical » Cloud-Init » Version: 23.2

cpe:2.3:a:canonical:cloud-init:23.2
Canonical » Cloud-Init » Version: 23.2.1

cpe:2.3:a:canonical:cloud-init:23.2.1
Canonical » Cloud-Init » Version: 23.2.2

cpe:2.3:a:canonical:cloud-init:23.2.2
Canonical » Cloud-Init » Version: 23.3

cpe:2.3:a:canonical:cloud-init:23.3
Canonical » Cloud-Init » Version: 23.3.1

cpe:2.3:a:canonical:cloud-init:23.3.1
Canonical » Cloud-Init » Version: 23.3.2

cpe:2.3:a:canonical:cloud-init:23.3.2
Canonical » Cloud-Init » Version: 23.3.3

cpe:2.3:a:canonical:cloud-init:23.3.3
Canonical » Cloud-Init » Version: 23.4

cpe:2.3:a:canonical:cloud-init:23.4
Canonical » Cloud-Init » Version: 23.4.1

cpe:2.3:a:canonical:cloud-init:23.4.1
Canonical » Cloud-Init » Version: 23.4.2

cpe:2.3:a:canonical:cloud-init:23.4.2
Canonical » Cloud-Init » Version: 23.4.3

cpe:2.3:a:canonical:cloud-init:23.4.3
Canonical » Cloud-Init » Version: 23.4.4

cpe:2.3:a:canonical:cloud-init:23.4.4
Canonical » Cloud-Init » Version: 24.1

cpe:2.3:a:canonical:cloud-init:24.1
Canonical » Cloud-Init » Version: 24.1.1

cpe:2.3:a:canonical:cloud-init:24.1.1
Canonical » Cloud-Init » Version: 24.1.2

cpe:2.3:a:canonical:cloud-init:24.1.2
Canonical » Cloud-Init » Version: 24.1.3

cpe:2.3:a:canonical:cloud-init:24.1.3
Canonical » Cloud-Init » Version: 24.1.4

cpe:2.3:a:canonical:cloud-init:24.1.4
Canonical » Cloud-Init » Version: 24.1.5

cpe:2.3:a:canonical:cloud-init:24.1.5
Canonical » Cloud-Init » Version: 24.1.6

cpe:2.3:a:canonical:cloud-init:24.1.6
Canonical » Cloud-Init » Version: 24.2

cpe:2.3:a:canonical:cloud-init:24.2
Canonical » Cloud-Init » Version: 24.3

cpe:2.3:a:canonical:cloud-init:24.3
Canonical » Cloud-Init » Version: 24.3.1

cpe:2.3:a:canonical:cloud-init:24.3.1
Canonical » Cloud-Init » Version: 24.4

cpe:2.3:a:canonical:cloud-init:24.4
Canonical » Cloud-Init » Version: 24.4.1

cpe:2.3:a:canonical:cloud-init:24.4.1
Canonical » Cloud-Init » Version: 25.1

cpe:2.3:a:canonical:cloud-init:25.1
Canonical » Cloud-Init » Version: 25.1.1

cpe:2.3:a:canonical:cloud-init:25.1.1
Canonical » Cloud-Init » Version: 25.1.2

cpe:2.3:a:canonical:cloud-init:25.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-6174

Products

Pricing

Contact Us