cloud-init vulnerabilities (Red Hat)

8 vulnerabilities.

• cloud-init Red Hat When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a... CVE-2024-6174 Fix available 8.8 HighJune 26, 2025
• cloud-init Red Hat sensitive data exposure in cloud-init logs CVE-2023-1786 Fix available 5.5 MediumApril 26, 2023
• cloud-init Red Hat sensitive data exposure in cloud-init logs CVE-2021-3429 Fix available 5.5 MediumMarch 20, 2021
• cloud-init Red Hat In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a... CVE-2020-8632 Fix available 5.5 MediumFebruary 5, 2020
• cloud-init Red Hat cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier... CVE-2020-8631 Fix available 5.5 MediumFebruary 5, 2020
• cloud-init Red Hat A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic... CVE-2019-0816 Fix available 5.1 MediumApril 9, 2019
• cloud-init Red Hat The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"... CVE-2018-10896 Fix available 4.6 MediumAugust 1, 2018
• cloud-init Red Hat Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... CVE-2013-2099 Fix available 4.3 MediumMay 16, 2013