漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
local snapd exploit through cloud-init
漏洞信息
cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659.
漏洞信息
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
漏洞
权限、特权和访问控制
漏洞
cloud-init 安全漏洞
漏洞信息
Cloud-init是一款用于云平台的虚拟机初始化工具。 Canonical snapd（Ubuntu Core 16版本和Ubuntu Core 18版本）中的cloud-init存在安全漏洞。攻击者可借助cloud-init用户数据/元数据利用该漏洞在设备上执行任意更改，绕过安全机制。
漏洞信息
N/A
漏洞
N/A