PT-2014-2866 · Vmware+1 · Vmware+1

Publicado 2014-04-15 · Atualizado 2014-04-16 · CVE-2013-4768

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Eucalyptus versions 2.0 through 3.4.1

Description The issue affects the web services APIs, allowing remote attackers to cause a denial of service. This is related to vectors in the "network connection clean up code" and involves components such as Cloud Controller (CLC), Walrus, Storage Controller (SC), and VMware Broker (VB).

Recommendations For Eucalyptus versions 2.0 through 3.4.1, consider restricting access to the web services APIs as a temporary workaround until a patch is available. Additionally, review the network connection clean up code to identify potential issues that could lead to a denial of service.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-4768

Produtos afetados

Eucalyptus

Vmware

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-4768 · Nota de Segurança
• https://eucalyptus.com/resources/security/advisories/esa-15 · Aviso do Fabricante