Canonical Cloud-init vulnerabilities

• canonical cloud-init cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with... CVE-2024-11584 Fix available 5.9 MediumJune 26, 2025
• canonical cloud-init When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a... CVE-2024-6174 Fix available 8.8 HighJune 26, 2025
• canonical cloud-init, ubuntu linux, fedoraproject fedora +2 more sensitive data exposure in cloud-init logs CVE-2023-1786 Fix available 5.5 MediumApril 26, 2023
• canonical cloud-init, ubuntu linux +1 more sensitive data exposure in cloud-init logs CVE-2022-2084 Fix available 5.5 MediumJune 29, 2022
• canonical cloud-init sensitive data exposure in cloud-init logs CVE-2021-3429 Fix available 5.5 MediumMarch 20, 2021
• canonical cloud-init, debian linux, opensuse leap +2 more In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a... CVE-2020-8632 Fix available 5.5 MediumFebruary 5, 2020
• canonical cloud-init, debian linux, opensuse leap +2 more cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier... CVE-2020-8631 Fix available 5.5 MediumFebruary 5, 2020
• canonical cloud-init, debian linux, suse linux enterprise server +2 more An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an... CVE-2012-6639 Fix available 8.8 HighNovember 25, 2019
• canonical cloud-init The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"... CVE-2018-10896 Fix available 4.6 MediumAugust 1, 2018