CVE-2018-10896

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"...

4.6 MediumFix available

CVE-2018-10896 is a medium vulnerability (CVSS 4.6) in Canonical Cloud-init, published August 1, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in cloud-init 0:19.4-1.el8.7.

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.35%Down 0.5 points since Apr 14, 2021

What each source reports

CVE List Score used 4.6

Record: CVE-2018-10896
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-321
Updated: 2026-11-02

EUVDEUVD-2018-2955 4.6

Record: EUVD-2018-2955
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rwhw-r234-9p3m 7.1

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"...

Record: GHSA-rwhw-r234-9p3m
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-321
Updated: 2026-11-02

NVD 7.1

Record: CVE-2018-10896
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0: 3.6 LowAV:L/AC:L/Au:N/C:P/I:P/A:N
Weakness: CWE-321
Updated: 2026-11-02

OSV 7.1

Record: CVE-2018-10896
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2020:3050 4.6

Red Hat Security Advisory: cloud-init security, bug fix, and enhancement update

Record: RHSA-2020:3050
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2020:3644 4.6

Red Hat Security Advisory: cloud-init security update

Record: RHSA-2020:3644
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2020:3898 8.1

Red Hat Security Advisory: cloud-init security, bug fix, and enhancement update

Record: RHSA-2020:3898
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

canonical cloud-init

Affected packages

Affected packages
Package	Affected	Fixed
`cloud-init` Red Hat:enterprise_linux:8::appstream	before 0:19.4-1.el8.7	0:19.4-1.el8.7
`cloud-init` Red Hat:rhel_eus:8.2::appstream	before 0:18.5-12.el8_2.3	0:18.5-12.el8_2.3
`cloud-init` Red Hat:enterprise_linux:7::server	before 0:19.4-7.el7	0:19.4-7.el7

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 29 moreShow less