CVE catalog
CVE-2024-6107
UBUNTU-CVE-2024-6107
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.42% · Oct 25, 2026
Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | maas | 16.04 | 1.8.3+bzr4053-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 1.9.0+bzr4533-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 1.10.0+bzr4578-0ubuntu2 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~alpha1+bzr4736-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~alpha2+bzr4776-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~alpha3+bzr4810-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~alpha4+bzr4843-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~beta1+bzr4873-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~beta1+bzr4873-0ubuntu2 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~beta1+bzr4873-0ubuntu3 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~beta2+bzr4920-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~beta2+bzr4920-0ubuntu2 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~beta3+bzr4941-0ubuntu1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~rc2+bzr5156-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0~rc2+bzr5156-0ubuntu1~16.04.2 | vulnerable |
| Ubuntu | maas | 16.04 | 2.0.0+bzr5189-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.1.1+bzr5544-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.1.3+bzr5573-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.1.5+bzr5596-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.2.0+bzr6054-0ubuntu2~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.2.2-6099-g8751f91-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.3.0-6434-gd354690-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | maas | 16.04 | 2.3.5-6511-gf466fdb-0ubuntu1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.3.0~beta2-6327-gdd05aa2-0ubuntu1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.3.0-6434-gd354690-0ubuntu1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.4.0~alpha2-6717-gffaddd526-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.4.0~beta1-6799-g391e5f16d-0ubuntu1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.4.0~beta2-6865-gec43e47e6-0ubuntu1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.4.0-6981-g011e51b7a-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | maas | 18.04 | 2.4.2-7034-g2f5deb8b8-0ubuntu1 | vulnerable |
| Ubuntu | maas | 20.04 | 2.6.0-7802-g59416a869-0ubuntu1 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.1 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.2 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.3 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.4 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.5 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.6 | vulnerable |
| Ubuntu | maas | 20.04 | 1:0.7 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: