Description
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
cloud-init cloud-init
before 0.7.0affected
References
- https://security-tracker.debian.org/tracker/CVE-2012-6639 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6639 ↗
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6639 ↗
- https://access.redhat.com/security/cve/cve-2012-6639 ↗
- http://www.openwall.com/lists/oss-security/2014/03/06/7 ↗
- https://www.securityfocus.com/bid/66019/references ↗