PT-2019-6816 · Canonical+1 · Cloud-Init+1

Florian Weimer + 1 · Publicado 2015-05-29 · Atualizado 2020-08-18 · CVE-2012-6639

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cloud-init versions prior to 0.7.0

Description A privilege elevation issue exists when requests to an untrusted system are submitted for EC2 instance data.

Recommendations For versions prior to 0.7.0, update to version 0.7.0 or later to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

ALT-PU-2015-1473

CVE-2012-6639

Produtos afetados

Alt Linux

Cloud-Init

Referências · 12

• https://errata.altlinux.org/ALT-PU-2015-1473 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/03/06/7 · Nota
• https://access.redhat.com/security/cve/cve-2012-6639 · Correção
• https://osv.dev/vulnerability/CVE-2012-6639 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2012-6639 · Nota
• https://securityfocus.com/bid/66019/references · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-6639 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6639 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6639 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-6639 · Nota de Segurança
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6639 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6639 · Nota