Most recent entries from all

ALSA-2025:10844 — Important: cloud-init security update

Affected: AlmaLinux:10: cloud-init

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

Security Fix(es):

* cloud-init: Cloud init permissions flaw (CVE-2024-6174)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-10809

BELL-CVE-2024-6174

Affected: Alpaquita:23: cloud-init, Alpaquita:stream: cloud-init

certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0756

EUVD-2026-245960

fkie_cve-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

GHSA-w8g9-wp36-fchj

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

msrc_CVE-2024-6174 — When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To preve…

msrc_CVE-2024-6174

OESA-2025-1783 — cloud-init security update

Affected: openEuler:20.03-LTS-SP4: cloud-init

Cloud-init is the defacto multi-distribution package that handles early initialization of a cloud instance. Security Fix(es):

cloud-init is an industry-standard multi-distribution method for cross-platform cloud instance initialization by Canonical. There is a security vulnerability in cloud-init, which originates from granting root access to hardcoded URLs during detection by non-x86 platforms.(CVE-2024-6174)

openSUSE-RU-2026:20129-1 — Recommended update for cloud-init

Recommended update for cloud-init

RHSA-2025:10844 — Red Hat Security Advisory: cloud-init security update

cloud-init: Cloud init permissions flaw

SUSE-RU-2026:20174-1 — Recommended update for cloud-init

Recommended update for cloud-init

UBUNTU-CVE-2024-6174

Affected: Ubuntu:Pro:16.04:LTS: cloud-init, Ubuntu:Pro:18.04:LTS: cloud-init, Ubuntu:Pro:20.04:LTS: cloud-init, Ubuntu:22.04:LTS: cloud-init, Ubuntu:24.04:LTS: cloud-init

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

WID-SEC-W-2025-1539 — Red Hat Enterprise Linux (cloud-init): Schwachstelle ermöglicht Erlangen von Administratorrechten

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in der cloud-init Komponente von Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen.