CVE-2013-4768: Input Validation
Published Apr 15, 2014
·Updated
The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMware Broker (VB).
Affected Software
17 affected components
Eucalyptus Eucalyptus=2.0
Eucalyptus Eucalyptus=2.0.1
Eucalyptus Eucalyptus=2.0.2
Eucalyptus Eucalyptus=2.0.3
Eucalyptus Eucalyptus=3.0
Eucalyptus Eucalyptus=3.0.1
Eucalyptus Eucalyptus=3.1.0
Eucalyptus Eucalyptus=3.1.1
Eucalyptus Eucalyptus=3.1.2
Eucalyptus Eucalyptus=3.2.0
Eucalyptus Eucalyptus=3.2.1
Eucalyptus Eucalyptus=3.2.2
Eucalyptus Eucalyptus=3.3.0
Eucalyptus Eucalyptus=3.3.1
Eucalyptus Eucalyptus=3.3.2
Eucalyptus Eucalyptus=3.4.0
Eucalyptus Eucalyptus=3.4.1
Event History
Apr 15, 2014
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Apr 16, 2014
Data Sourced
via NVD·12:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4768?
CVE-2013-4768 is classified as a denial of service vulnerability affecting Eucalyptus systems.
2
How do I fix CVE-2013-4768?
To mitigate CVE-2013-4768, upgrade to a version of Eucalyptus that is not vulnerable, specifically version 3.4.2 or later.
3
What software versions are affected by CVE-2013-4768?
CVE-2013-4768 affects Eucalyptus versions 2.0 through 3.4.1.
4
What impact does CVE-2013-4768 have on Eucalyptus?
CVE-2013-4768 can allow remote attackers to cause a denial of service, affecting services like Cloud Controller and Walrus.
5
Is there a patch available for CVE-2013-4768?
Yes, a patch is available in the form of upgraded software versions beyond 3.4.1.