Vulnerabilities of Canonical cloud-init
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-11584 | cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that… | 5.9 Medium | Jun 26, 2025 |
| CVE-2024-6174 | When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address | 8.8 High | Jun 26, 2025 |
| CVE-2018-10896 | The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling… | 4.6 Medium | Aug 1, 2018 |