CVE-2012-6639 An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.
HighCVSS 8.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cloud-init(Debian:12) | < 0.7.1-1 | 0.7.1-1 |
| debian/cloud-init(Debian:13) | < 0.7.1-1 | 0.7.1-1 |
| debian/cloud-init(Debian:14) | < 0.7.1-1 | 0.7.1-1 |
| cloud-init | = before 0.7.0 | No fix listed |
| Canonical cloud-init | < 0.7.0 | 0.7.0 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
References
- Debian Security Tracker CVE-2012-6639 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- bugzilla.suse.com issue-tracking third-party-advisory
- access.redhat.com patch third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry