CVE-2019-0816 Security feature bypass in Ubuntu Server

Medium 5.1 Published 9 Apr 2019 Updated 4 Aug 2024

Attackers can bypass SSH keypair security features in Azure Linux images using cloud-init, potentially compromising access controls.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2019-0816?

CVE-2019-0816 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 9 Apr 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.

Weakness: CWE-706

Which versions are affected by CVE-2019-0816?

It affects 1 product.

Linux distribution packages (6)

`cloud-init` Red Hat:enterprise_linux:7::server	All versions	`0:18.2-1.el7_6.2`
`cloud-init` Red Hat:enterprise_linux:8::appstream	All versions	`0:18.5-1.el8.4`
`cloud-init` SUSE:Linux Enterprise Module for Public Cloud 12	All versions	`19.2-37.33.1`
`cloud-init` SUSE:Linux Enterprise Module for Public Cloud 15	All versions	`19.2-5.18.1`
`cloud-init` SUSE:Linux Enterprise Module for Public Cloud 15 SP1	All versions	`19.2-8.11.1`
`cloud-init` openSUSE:Leap 15.1	All versions	`19.2-lp151.2.9.1`

Products include Canonical Ubuntu Linux.

How do I fix CVE-2019-0816?

Apply the vendor's patch.

Is CVE-2019-0816 being exploited?

There is no known exploitation of CVE-2019-0816 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2019-0816, GHSA-gjp8-2rjx-f9mg, RHBA-2019:1992, RHSA-2019:0597, SUSE-SU-2019:3096-1, SUSE-SU-2019:3097-1 and 3 more.