Lucene search
K

33 matches found

RedHat Linux
RedHat Linux
added 2025/07/16 2:11 p.m.4 views

cloud-init: Cloud init permissions flaw

An access permissions flaw was found in cloud-init. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded URL with a local IP address, which creates a security exposure...

8.8CVSS5.7AI score0.0013EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/16 4:11 a.m.4 views

cloud-init: Cloud init permissions flaw

An access permissions flaw was found in cloud-init. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded URL with a local IP address, which creates a security exposure...

8.8CVSS5.7AI score0.0013EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/14 7:35 a.m.4 views

cloud-init: Cloud init permissions flaw

An access permissions flaw was found in cloud-init. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded URL with a local IP address, which creates a security exposure...

8.8CVSS5.7AI score0.0013EPSS
Exploits0References6
Amazon
Amazon
added 2025/07/10 12:0 a.m.2 views

Important: cloud-init

Issue Overview: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration. CVE-2024-6174 Affected Packages: cloud-init Note: This advisory is applicable to Amazon...

8.8CVSS6.8AI score0.0013EPSS
Exploits0
Amazon
Amazon
added 2025/07/10 12:0 a.m.2 views

Important: cloud-init

Issue Overview: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration. CVE-2024-6174 Affected Packages: cloud-init Issue Correction: Run dnf update cloud-init...

8.8CVSS6.6AI score0.0013EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/06/27 12:5 a.m.3 views

SUSE CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

8.8CVSS6.4AI score0.0013EPSS
Exploits0References10
OSV
OSV
added 2025/06/26 10:15 a.m.3 views

AZL-64374 CVE-2024-6174 affecting package cloud-init for versions less than 23.3-7

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

8.8CVSS5.7AI score0.0013EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/06/26 10:15 a.m.1 views

CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

8.8CVSS7.1AI score0.0013EPSS
Exploits0References1
OSV
OSV
added 2025/06/26 10:15 a.m.1 views

DEBIAN-CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

8.8CVSS5.2AI score0.0013EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/26 9:15 a.m.5 views

CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

8.8CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/26 9:15 a.m.4 views

CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

8.8CVSS7AI score0.0013EPSS
Exploits0References1
CVE
CVE
added 2025/06/26 9:15 a.m.46 views

CVE-2024-6174

Summary: CVE-2024-6174 affects cloud-init. When a non-x86 platform is detected, it could grant root access to a hardcoded URL with a local IP. This is the underlying cause. Impact: High (CVSS v3.1: 8.8, privileges required: none, user interaction: none, scope: unchanged). Affected scope (from con...

8.8CVSS7AI score0.0013EPSS
Exploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/18 9:49 a.m.3 views

Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

7AI score
Exploits0References3
Rows per page
Query Builder