Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8631
5.5
MEDIUMCVSS v3
Published
February 5, 2020
CVSS v2
2.1 LOW
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
canonical/cloud-init
GitHubOfficial upstream for the cloud-init: cloud instance initialization
GitHubOfficial upstream for the cloud-init: cloud instance initialization<= 19.4NVD
Docker Hub