Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-15869
5
MEDIUMCVSS v2
Published
August 25, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.
hashicorp/packer
GitHubPacker is a tool for creating identical machine images for multiple platforms from a single source configuration.
GitHubPacker is a tool for creating identical machine images for multiple platforms from a single source configuration.< 1.3.0NVD