CVE-2019-0816

Published: Apr 9, 2019Modified: Jun 17, 2026

5.1

Vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.4 / Impact: 3.6

Source: NVD

Description

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.

Affected (1)

Products: Canonical: Ubuntu Linux

Canonical

1 product

Ubuntu Linux

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 18.04

Running on/with	Platform Versions
Microsoft Azure	All versions

Related CWEs

CWE-706

Use of Incorrectly-Resolved Name or Reference

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

References (4)

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00018.html

Source: secure@microsoft.com

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0816

Source: secure@microsoft.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0816

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.