Lucene search
RedhatCVELIST:CVE-2018-10896HistoryAug 01, 2018 - 5:00 p.m.
CVE-2018-10896
2018-08-0117:00:00
CWE-321
redhat
raw.githubusercontent.com
1
The default cloud-init configuration, in cloud-init 0.6.2 and newer, included “ssh_deletekeys: 0”, disabling cloud-init’s deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.
Related
redhatcve
redhatcve
CVE-2018-10896
2018-07-10 13:18:42
nessus
nessus
RHEL 8 : cloud-init (RHSA-2020:3050)
2020-07-21 00:00:00
RHEL 8 : cloud-init (RHSA-2020:3644)
2020-09-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2022-1318)
2022-03-21 00:00:00
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2023-1085)
2023-01-09 00:00:00
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2020-2041)
2020-09-29 00:00:00
veracode
veracode
Insecure Configuration
2020-07-22 04:05:03
prion
prion
Design/Logic Flaw
2018-08-01 17:29:00
redhat
redhat
(RHSA-2020:3050) Low: cloud-init security, bug fix, and enhancement update
2020-07-21 15:01:15
(RHSA-2020:3644) Low: cloud-init security update
2020-09-08 07:35:29
osv
osv
CVE-2018-10896
2018-08-01 17:29:00
cve
cve
CVE-2018-10896
2018-08-01 17:29:00
cbl_mariner
cbl_mariner
CVE-2018-10896 affecting package cloud-init 19.1-4
2021-11-03 19:21:13
oraclelinux
oraclelinux
cloud-init security, bug fix, and enhancement update
2020-10-06 00:00:00
cloud-init security, bug fix, and enhancement update
2020-11-10 00:00:00
amazon
amazon
Medium: cloud-init
2021-01-05 23:34:00
centos
centos
cloud security update
2020-10-20 17:49:47