Lucene search
F5F5:K33846344HistoryApr 23, 2021 - 12:00 a.m.
K33846344 : Cloud-init vulnerabilities CVE-2020-8631 and CVE-2020-8632
2021-04-2300:00:00
my.f5.com
9
Security Advisory Description
cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
nessus
nessus
EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2020-1304)
2020-03-23 00:00:00
EulerOS 2.0 SP3 : cloud-init (EulerOS-SA-2020-1373)
2020-04-15 00:00:00
RHEL 8 : cloud-init (RHSA-2020:4650)
2020-11-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2020-2333)
2020-11-04 00:00:00
Mageia: Security Advisory (MGASA-2020-0295)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2113-1)
2020-02-22 00:00:00
suse
suse
Security update for cloud-init (moderate)
2020-03-29 00:00:00
redhat
redhat
osv
osv
cloud-init - security update
2020-02-21 00:00:00
CVE-2020-8631
2020-02-05 14:15:11
CVE-2020-8632
2020-02-05 14:15:11
debian
debian
[SECURITY] [DLA 2113-1] cloud-init security update
2020-02-21 09:02:10
mageia
mageia
Updated cloud-init packages fix security vulnerability
2020-08-01 02:25:42
centos
centos
cloud security update
2020-10-20 17:49:47
amazon
amazon
Medium: cloud-init
2021-01-05 23:34:00
Medium: cloud-init
2021-03-18 17:22:00
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0282
2020-03-03 00:00:00
Important Photon OS Security Update - PHSA-2020-0214
2020-02-12 00:00:00
Moderate Photon OS Security Update - PHSA-2020-0058
2020-02-15 00:00:00
oraclelinux
oraclelinux
cloud-init security, bug fix, and enhancement update
2020-11-10 00:00:00
cloud-init security, bug fix, and enhancement update
2020-10-06 00:00:00
redhatcve
redhatcve
CVE-2020-8631
2020-02-05 21:44:17
CVE-2020-8632
2020-02-05 21:14:41
veracode
veracode
Information Disclosure
2020-10-01 03:52:47
Predictable Password
2020-10-01 03:52:46
prion
prion
Design/Logic Flaw
2020-02-05 14:15:00
Design/Logic Flaw
2020-02-05 14:15:00
cvelist
cvelist
CVE-2020-8632
2020-02-05 13:40:05
CVE-2020-8631
2020-02-05 13:39:50
nvd
nvd
CVE-2020-8632
2020-02-05 14:15:11
CVE-2020-8631
2020-02-05 14:15:11
debiancve
debiancve
CVE-2020-8631
2020-02-05 14:15:11
CVE-2020-8632
2020-02-05 14:15:11
cve
cve
CVE-2020-8632
2020-02-05 14:15:11
CVE-2020-8631
2020-02-05 14:15:11
ubuntucve
ubuntucve
CVE-2020-8631
2020-02-05 00:00:00
CVE-2020-8632
2020-02-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-8632 affecting package cloud-init 19.1-6
2020-11-30 19:30:42
CVE-2020-8631 affecting package cloud-init 19.1-6
2020-11-30 19:30:42