CVE-2017-9450 The Amazon Web Services (AWS) CloudFormation bootstrap tools package (aka aws-cfn-bootstrap) before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the abilit...
HighCVSS 7.8
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Amazon Web Services (AWS) CloudFormation bootstrap tools package (aka aws-cfn-bootstrap) before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amazon web services cloudformation bootstrap | < 1.4-19.10 | 1.4-19.10 |
References
- 99972 third-party-advisory vdb-entry
- alas.aws.amazon.com vendor-advisory
- sintonen.fi