CVE:CVE-2023-1786
CNNVD:CNNVD-202304-2128
cloud-init是Canonical开源的一个用于跨平台云实例初始化的行业标准多分发方法。
cloud-init 23.1.2之前版本存在安全漏洞，该漏洞源于日志中可能会暴露敏感数据。攻击者利用该漏洞使用此信息来查找散列密码并可能提升特权。
solution:Upgrade canonical cloud-init to a higher version than 23.1.2,and avoid the version (,23.1.2); Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,22.04,22.10,23.04,and avoid the version 16.04,18.04,20.04,22.04,22.10,23.04; Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38