CVE-2012-4067

Severity

43%

Complexity

86%

Confidentiality

48%

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

Type

Eucalyptus Systems Eucalyptus

First reported 11 years ago

2013-09-17 12:04:00

Last updated 11 years ago

2013-09-18 19:51:00

Affected Software

Eucalyptus Systems Eucalyptus 1.0

1.0

Eucalyptus Systems Eucalyptus 1.1

1.1

Eucalyptus Systems Eucalyptus 1.2

1.2

Eucalyptus Systems Eucalyptus 1.3

1.3

Eucalyptus Systems Eucalyptus 1.4

1.4

Eucalyptus Systems Eucalyptus 1.5.1

1.5.1

Eucalyptus Systems Eucalyptus 1.5.2

1.5.2

Eucalyptus Systems Eucalyptus 1.6

1.6

Eucalyptus Systems Eucalyptus 1.6.2

1.6.2

Eucalyptus Systems Eucalyptus 2.0

2.0

Eucalyptus Systems Eucalyptus 2.0.0

2.0.0

Eucalyptus Systems Eucalyptus 2.0.1

2.0.1

Eucalyptus Systems Eucalyptus 2.0.2

2.0.2

Eucalyptus Systems Eucalyptus 2.0.3

2.0.3

Eucalyptus Systems Eucalyptus 3.0

3.0

Eucalyptus Systems Eucalyptus 3.0.1

3.0.1

Eucalyptus Systems Eucalyptus 3.1.0

3.1.0

Eucalyptus Systems Eucalyptus 3.1.1

3.1.1

Eucalyptus Systems Eucalyptus 3.1.2

3.1.2

Eucalyptus Systems Eucalyptus 3.2.0

3.2.0

References

http://www.eucalyptus.com/resources/security/advisories/esa-09

Vendor Advisory

https://eucalyptus.atlassian.net/browse/EUCA-5277