CVE-2012-4063: Medium severity eucalyptus vulnerability
Published Oct 1, 2012
·Updated
The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote attackers to cause a denial of service via unspecified vectors.
Affected Software
18 affected components
Eucalyptus Eucalyptus<=3.1.0
Eucalyptus Eucalyptus=1.0
Eucalyptus Eucalyptus=1.1
Eucalyptus Eucalyptus=1.2
Eucalyptus Eucalyptus=1.3
Eucalyptus Eucalyptus=1.4
Eucalyptus Eucalyptus=1.5.1
Eucalyptus Eucalyptus=1.5.2
Eucalyptus Eucalyptus=1.6
Eucalyptus Eucalyptus=1.6.2
Eucalyptus Eucalyptus=2.0
Eucalyptus Eucalyptus=2.0.0
Eucalyptus Eucalyptus=2.0.1
Eucalyptus Eucalyptus=2.0.2
Eucalyptus Eucalyptus=2.0.3
Eucalyptus Eucalyptus=3.0
Eucalyptus Eucalyptus=3.0.1
Eucalyptus Eucalyptus=3.1.1
Event History
Oct 1, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4063?
CVE-2012-4063 has a severity rating of medium, as it allows for remote denial of service attacks.
2
How do I fix CVE-2012-4063?
To fix CVE-2012-4063, upgrade your Eucalyptus installation to version 3.1.1 or later.
3
Which versions of Eucalyptus are affected by CVE-2012-4063?
CVE-2012-4063 affects Eucalyptus versions prior to 3.1.1, including versions 1.0 to 3.0.1.
4
What kind of attack is possible with CVE-2012-4063?
CVE-2012-4063 allows remote attackers to cause a denial of service through unspecified vectors.
5
Is there a workaround for CVE-2012-4063?
There is no official workaround for CVE-2012-4063, so upgrading to the latest version is recommended.