Most recent entries from all

ALSA-2023:6371 — Moderate: cloud-init security, bug fix, and enhancement update

Affected: AlmaLinux:9: cloud-init

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

Security Fix(es):

* cloud-init: sensitive data could be exposed in logs (CVE-2023-1786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Withdrawn: BELL-CVE-2023-1786 — CVE-2023-1786 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2024-avi-0305 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

certfr-2024-avi-0305

CLEANSTART-2024-JF46935 — Sensitive data could be exposed in logs of cloud-init before version 23

Affected: CleanStart: cloud-init

Security vulnerability affects the cloud-init package. Sensitive data could be exposed in logs of cloud-init before version 23.

EUVD-2026-216163

fkie_cve-2023-1786

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

GHSA-2vcw-8vc6-xxfw

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

gsd-2023-1786

msrc_CVE-2023-1786 — sensitive data exposure in cloud-init logs

msrc_CVE-2023-1786

OESA-2023-1297 — cloud-init security update

Affected: openEuler:20.03-LTS-SP1: cloud-init, openEuler:20.03-LTS-SP3: cloud-init, openEuler:22.03-LTS: cloud-init, openEuler:22.03-LTS-SP1: cloud-init

Cloud-init is the defacto multi-distribution package that handles early initialization of a cloud instance. Security Fix(es): Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.(CVE-2023-1786)

openSUSE-SU-2024:13053-1 — cloud-init-23.1-2.1 on GA media

cloud-init-23.1-2.1 on GA media

SUSE-SU-2023:2164-1 — Security update for cloud-init

Security update for cloud-init

UBUNTU-CVE-2023-1786

Affected: Ubuntu:Pro:16.04:LTS: cloud-init, Ubuntu:18.04:LTS: cloud-init, Ubuntu:20.04:LTS: cloud-init, Ubuntu:22.04:LTS: cloud-init

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

WID-SEC-W-2023-2853 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.