vulnerability

Ubuntu: (CVE-2018-15869): packer vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Aug 25, 2018

Added

Jun 26, 2025

Modified

Jun 26, 2025

Description

An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.

Solution

no-fix-ubuntu-package

References

CVE-2018-15869
https://attackerkb.com/topics/CVE-2018-15869
https://github.com/aws/aws-cli/issues/3629
https://github.com/hashicorp/packer/issues/6584
https://www.cve.org/CVERecord?id=CVE-2018-15869

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report