CVE:CVE-2012-6639
CNNVD:CNNVD-201911-1349
Cloud-init是一款用于云平台的虚拟机初始化工具。
Cloud-init 0.7.0之前版本中存在提权漏洞。攻击者可利用该漏洞获取root权限并执行未授权的操作。
solution:Upgrade canonical cloud-init to a higher version than 0.7.0,and avoid the version (,0.7.0); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp3,and avoid the version 11:sp2,11:sp3