CVE Vulnerabilities

CVE-2012-4067

Published: Sep 17, 2013 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
5 MODERATE
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
LOW

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.

Affected Software

Name Vendor Start Version End Version
Eucalyptus Eucalyptus * 3.2.1 (including)
Eucalyptus Eucalyptus 1.0 (including) 1.0 (including)
Eucalyptus Eucalyptus 1.1 (including) 1.1 (including)
Eucalyptus Eucalyptus 1.2 (including) 1.2 (including)
Eucalyptus Eucalyptus 1.3 (including) 1.3 (including)
Eucalyptus Eucalyptus 1.4 (including) 1.4 (including)
Eucalyptus Eucalyptus 1.5.1 (including) 1.5.1 (including)
Eucalyptus Eucalyptus 1.5.2 (including) 1.5.2 (including)
Eucalyptus Eucalyptus 1.6 (including) 1.6 (including)
Eucalyptus Eucalyptus 1.6.2 (including) 1.6.2 (including)
Eucalyptus Eucalyptus 2.0 (including) 2.0 (including)
Eucalyptus Eucalyptus 2.0.0 (including) 2.0.0 (including)
Eucalyptus Eucalyptus 2.0.1 (including) 2.0.1 (including)
Eucalyptus Eucalyptus 2.0.2 (including) 2.0.2 (including)
Eucalyptus Eucalyptus 2.0.3 (including) 2.0.3 (including)
Eucalyptus Eucalyptus 3.0 (including) 3.0 (including)
Eucalyptus Eucalyptus 3.0.1 (including) 3.0.1 (including)
Eucalyptus Eucalyptus 3.1.0 (including) 3.1.0 (including)
Eucalyptus Eucalyptus 3.1.1 (including) 3.1.1 (including)
Eucalyptus Eucalyptus 3.1.2 (including) 3.1.2 (including)
Eucalyptus Eucalyptus 3.2.0 (including) 3.2.0 (including)
Eucalyptus Ubuntu lucid *
Eucalyptus Ubuntu oneiric *
Eucalyptus Ubuntu precise *

References