CVE-2013-4769: Medium severity eucalyptus vulnerability

Published Dec 26, 2014

Updated

The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows remote attackers to cause a denial of service (traffic amplification) via spoofed DNS queries.

Affected Software

5 affected components

Eucalyptus Eucalyptus=3.3.0

Eucalyptus Eucalyptus=3.3.1

Eucalyptus Eucalyptus=3.3.2

Eucalyptus Eucalyptus=3.4.0

Eucalyptus Eucalyptus=3.4.1

Event History

Dec 26, 2014

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4769?

CVE-2013-4769 has a severity rating that indicates it may allow remote attackers to perform a denial of service through traffic amplification.

How do I fix CVE-2013-4769?

To fix CVE-2013-4769, upgrade your Eucalyptus installation to version 3.4.2 or later.

What versions of Eucalyptus are affected by CVE-2013-4769?

CVE-2013-4769 affects Eucalyptus versions 3.3.0, 3.3.1, 3.3.2, 3.4.0, and 3.4.1.

Is CVE-2013-4769 a local or remote vulnerability?

CVE-2013-4769 is a remote vulnerability that can be exploited by attackers from outside the network.

What is the impact of CVE-2013-4769?

The impact of CVE-2013-4769 is potential denial of service, which can disrupt the functioning of affected systems.