CVE-2012-6639
published 2019-11-25CVE-2012-6639: An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.
high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | cloud-init | < 0.7.0 | 0.7.0 |
| canonical | cloud-init | >= 0 < 0.7.1-1 | 0.7.1-1 |
| canonical | cloud-init | >= 0 < 0.7.1-1 | 0.7.1-1 |
| canonical | cloud-init | >= 0 < 0.7.1-1 | 0.7.1-1 |
| canonical | cloud-init | >= 0 < 0.7.1-1 | 0.7.1-1 |
| cloud-init | cloud-init | — | — |
| debian | cloud-init | < cloud-init 0.7.1-1 (bookworm) | cloud-init 0.7.1-1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| suse | linux_enterprise_server | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH