CVE Vulnerabilities

CVE-2012-4067

Published: Sep 17, 2013 | Modified: Sep 18, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
5 MODERATE
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
LOW

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.

Affected Software

Name Vendor Start Version End Version
Eucalyptus Eucalyptus * 3.2.1 (including)
Eucalyptus Eucalyptus 1.0 (including) 1.0 (including)
Eucalyptus Eucalyptus 1.1 (including) 1.1 (including)
Eucalyptus Eucalyptus 1.2 (including) 1.2 (including)
Eucalyptus Eucalyptus 1.3 (including) 1.3 (including)
Eucalyptus Eucalyptus 1.4 (including) 1.4 (including)
Eucalyptus Eucalyptus 1.5.1 (including) 1.5.1 (including)
Eucalyptus Eucalyptus 1.5.2 (including) 1.5.2 (including)
Eucalyptus Eucalyptus 1.6 (including) 1.6 (including)
Eucalyptus Eucalyptus 1.6.2 (including) 1.6.2 (including)
Eucalyptus Eucalyptus 2.0 (including) 2.0 (including)
Eucalyptus Eucalyptus 2.0.0 (including) 2.0.0 (including)
Eucalyptus Eucalyptus 2.0.1 (including) 2.0.1 (including)
Eucalyptus Eucalyptus 2.0.2 (including) 2.0.2 (including)
Eucalyptus Eucalyptus 2.0.3 (including) 2.0.3 (including)
Eucalyptus Eucalyptus 3.0 (including) 3.0 (including)
Eucalyptus Eucalyptus 3.0.1 (including) 3.0.1 (including)
Eucalyptus Eucalyptus 3.1.0 (including) 3.1.0 (including)
Eucalyptus Eucalyptus 3.1.1 (including) 3.1.1 (including)
Eucalyptus Eucalyptus 3.1.2 (including) 3.1.2 (including)
Eucalyptus Eucalyptus 3.2.0 (including) 3.2.0 (including)
Eucalyptus Ubuntu lucid *
Eucalyptus Ubuntu oneiric *
Eucalyptus Ubuntu precise *

References