Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1073591 - (CVE-2012-6639) CVE-2012-6639 cloud-init: insecure transmission of EC2 instance data can lead to root privilege escalation
CVE-2012-6639 cloud-init: insecure transmission of EC2 instance data can lead...
Status: CLOSED CURRENTRELEASE
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
high Severity high
: ---
: ---
Assigned To: Red Hat Product Security
impact=important,public=20140107,repo...
: Security
Depends On: 1073592
Blocks:
  Show dependency tree / graph
 
Reported: 2014-03-06 13:36 EST by Vincent Danen
Modified: 2016-04-26 09:33 EDT (History)
21 users (show)

See Also:
Fixed In Version: cloud-init 0.7.0
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2014-03-07 03:43:50 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Vincent Danen 2014-03-06 13:36:17 EST 
It was reported [1],[2] that cloud-init could send requests for EC2 instance data to untrusted systems.  This could allow someone who has control over a suitable domain name to obtain root rights on an affected system.

This issue was found and silently fixed in 2012; version 0.7.0 contains the fix [3].

[1] http://seclists.org/oss-sec/2014/q1/514
[2] https://bugs.launchpad.net/cloud-init/+bug/1040200
[3] http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/revision/635


Statement:

Not vulnerable. This issue did not affect the versions of cloud-init as shipped with Red Hat Enterprise Linux OpenStack Platform 3.0.
Comment 1 Vincent Danen 2014-03-06 13:37:07 EST 
Created cloud-init tracking bugs for this issue:

Affects: epel-5 [bug 1073592]
Comment 2 Vincent Danen 2014-03-06 13:39:05 EST 
This does affect EPEL5, however, as it provides cloud-init 0.6.3.  I do see now that EPEL 6 does in fact include 0.7.4.
Comment 3 Sam Kottler 2014-03-07 03:43:50 EST 
A patch that fixes this bug was added the cloud-init in EPEL 5 back in 2012, so it's not vulnerable either.

http://pkgs.fedoraproject.org/cgit/cloud-init.git/commit/?h=el5&id=8462fc9d5504c426d14baa797a759006435e078f
Comment 4 Vincent Danen 2014-03-07 12:57:15 EST 
Perfect, thanks Sam!
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.