CVE-2024-6174 - Vulnerability Details - OpenCVE

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://github.com/canonical/cloud-init/commit/e3f42adc2674a38fb29e414cfbf96f884934b2d2
https://github.com/canonical/cloud-init/releases/tag/25.1.3
https://nvd.nist.gov/vuln/detail/CVE-2024-6174
https://www.cve.org/CVERecord?id=CVE-2024-6174

History

Fri, 27 Jun 2025 00:30:00 +0000

Type	Values Removed	Values Added
Title		cloud-init: From CVEorg collector
Weaknesses		CWE-276
References		https://github.com/canonical/cloud-init/commit/e3f42adc2674a38fb29e414cfbf96f884934b2d2 https://nvd.nist.gov/vuln/detail/CVE-2024-6174 https://www.cve.org/CVERecord?id=CVE-2024-6174
Metrics	threat_severity `None`	threat_severity `Important`

Thu, 26 Jun 2025 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-287

Thu, 26 Jun 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 26 Jun 2025 09:30:00 +0000

Type	Values Removed	Values Added
Description		When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.
References		https://github.com/canonical/cloud-init/releases/tag/25.1.3
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2025-06-26T09:15:25.462Z

Updated: 2025-06-26T17:38:50.843Z

Reserved: 2024-06-19T22:11:48.245Z

Link: CVE-2024-6174

Vulnrichment

Updated: 2025-06-26T13:29:51.276Z

NVD

Status : Awaiting Analysis

Published: 2025-06-26T10:15:25.133

Modified: 2025-06-26T18:57:43.670

Link: CVE-2024-6174

Redhat

Severity : Important

Publid Date: 2025-06-26T09:15:25Z

Links: CVE-2024-6174 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6174", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2024-06-19T22:11:48.245Z", "datePublished": "2025-06-26T09:15:25.462Z", "dateUpdated": "2025-06-26T17:38:50.843Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "cloud-init", "platforms": ["Linux"], "product": "cloud-init", "vendor": "Canonical", "versions": [{"lessThan": "25.1.3", "status": "affected", "version": "0.7.9", "versionType": "semver"}]}], "datePublic": "2025-06-12T11:24:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration."}], "value": "When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,\u00a0cloud-init default configurations disable platform enumeration."}], "impacts": [{"descriptions": [{"lang": "en", "value": "This vulnerability allows local attackers with network access to place themselves in a position to control cloud-init booting of non-x86 systems"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "references": [{"url": "https://github.com/canonical/cloud-init/releases/tag/25.1.3"}], "source": {"discovery": "INTERNAL"}, "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2025-06-26T09:15:25.462Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "CWE-287 Improper Authentication"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-26T13:29:27.137985Z", "id": "CVE-2024-6174", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-26T17:38:50.843Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6174", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-26T13:29:27.137985Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-26T13:29:51.276Z"}}], "cna": {"source": {"discovery": "INTERNAL"}, "impacts": [{"descriptions": [{"lang": "en", "value": "This vulnerability allows local attackers with network access to place themselves in a position to control cloud-init booting of non-x86 systems"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Canonical", "product": "cloud-init", "versions": [{"status": "affected", "version": "0.7.9", "lessThan": "25.1.3", "versionType": "semver"}], "platforms": ["Linux"], "packageName": "cloud-init", "defaultStatus": "unaffected"}], "datePublic": "2025-06-12T11:24:00.000Z", "references": [{"url": "https://github.com/canonical/cloud-init/releases/tag/25.1.3"}], "descriptions": [{"lang": "en", "value": "When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,\u00a0cloud-init default configurations disable platform enumeration.", "supportingMedia": [{"type": "text/html", "value": "When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.", "base64": false}]}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2025-06-26T09:15:25.462Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6174", "state": "PUBLISHED", "dateUpdated": "2025-06-26T17:38:50.843Z", "dateReserved": "2024-06-19T22:11:48.245Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2025-06-26T09:15:25.462Z", "assignerShortName": "canonical"}, "dataVersion": "5.1"}