Skip to main content

Ubuntu EUVDEUVD-2024-54980

| CVE-2024-11584 MEDIUM
Incorrect Permission Assignment for Critical Resource (CWE-732)
2025-06-26 security@ubuntu.com
Information Disclosure Ubuntu Debian Cloud Init Red Hat Suse
5.9
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Ubuntu
MEDIUM
qualitative
SUSE
MEDIUM
qualitative
Red Hat
5.9 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

4
EUVD ID Assigned
Mar 15, 2026 - 23:54 euvd
EUVD-2024-54980
Analysis Generated
Mar 15, 2026 - 23:54 vuln.today
Patch released
Mar 15, 2026 - 23:54 nvd
Patch available
CVE Published
Jun 26, 2025 - 10:15 nvd
MEDIUM 5.9

DescriptionCVE.org

cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.

Analysis

cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.

Technical ContextAI

This vulnerability is classified as Incorrect Permission Assignment for Critical Resource (CWE-732).

RemediationAI

A vendor patch is available. Apply it as soon as possible and verify the fix.

More in Cloud Init

View all
CVE-2024-6174 HIGH
8.8 Jun 26

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To preven
CVE-2018-10896 HIGH
7.1 Aug 01

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init'
CVE-2023-1786 MEDIUM
5.5 Apr 26

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. Rated medium severity (CVSS 5.5), this vuln
CVE-2020-8632 MEDIUM
5.5 Feb 05

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value,

CVE-2020-8631 MEDIUM
5.5 Feb 05

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict

Same weakness CWE-732 – Incorrect Permission Assignment for Critical Resource

View all
CVE-2017-9462 HIGH POC
8.8
CVE-2017-3006 HIGH POC
8.8
CVE-2017-9602 CRITICAL POC
9.8
CVE-2022-22960 HIGH POC
7.8
CVE-2021-38085 HIGH POC
7.8
CVE-2021-35449 HIGH POC
7.8
CVE-2020-11855 HIGH POC
7.8
CVE-2020-10883 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

Ubuntu

Priority: Medium
cloud-init
Release Status Version
xenial not-affected -
upstream released 25.1.3
trusty DNE -
oracular ignored end of life, was needed
bionic released 23.1.2-0ubuntu0~18.04.1+esm1
focal released 24.4.1-0ubuntu0~20.04.3+esm1
jammy released 25.1.4-0ubuntu0~22.04.1
noble released 25.1.4-0ubuntu0~24.04.1
plucky released 25.1.4-0ubuntu0~25.04.1
USN-7677-1

Debian

Bug #1108402
cloud-init
Release Status Fixed Version Urgency
bullseye vulnerable 20.4.1-2+deb11u1 -
bookworm fixed 22.4.2-1+deb12u3 -
trixie fixed 25.1.4-1+deb13u1 -
forky, sid fixed 25.3-2 -
(unstable) fixed 25.1.4-1 -

SUSE

Severity: Medium
Product Status
Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd Affected
Image SLES-Azure-3P Image SLES-Azure-Basic Image SLES-Azure-Standard Image SLES-BYOS-Azure Image SLES-BYOS-EC2 Image SLES-CHOST-BYOS-Aliyun Image SLES-CHOST-BYOS-Azure Image SLES-CHOST-BYOS-EC2 Image SLES-CHOST-BYOS-GDC Image SLES-CHOST-BYOS-SAP-CCloud Image SLES-EC2 Image SLES-Hardened-BYOS-Azure Image SLES-Hardened-BYOS-EC2 Image SLES-SAP-Azure Image SLES-SAP-Azure-3P Image SLES-SAP-BYOS-Azure Image SLES-SAP-BYOS-EC2 Image SLES-SAPCAL-Azure Image SLES-SAPCAL-EC2 Affected
SUSE Linux Enterprise Server 16.0 Fixed
SUSE Linux Enterprise Server for SAP applications 16.0 Fixed
SUSE Linux Micro 6.0 Fixed

Share

EUVD-2024-54980 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy