Known vulnerabilities in cloud-init

Software: cloud-init
Software CPE: cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cloud-init cloud-init is affected by 2 known vulnerabilities: 1 high, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112884 - Insufficient Verification of Data Authenticity
CVE-2024-6174
CWE-345 High
No
No
25.1.3 14.07.2025 SB2025071434
SB2025071437
SB2025071438
and 18 more
#VU112883 - Incorrect Default Permissions
CVE-2024-11584
CWE-276 Low
No
No
25.1.3 14.07.2025 SB2025071434
SB2025071437
SB2025071438
and 10 more