Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6174: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | cloud-init | 0:19.3-46.amzn2.0.6 |
Vulnerabilities 1
-
High 8.8
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To preve…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-6174.html