CVE-2012-4067

Published: Sep 17, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.

Affected (21)

Products: Eucalyptus: Eucalyptus

Eucalyptus

1 product

Eucalyptus

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Eucalyptus Eucalyptus	Up to 3.2.1
Eucalyptus Eucalyptus	Version 1.0
Eucalyptus Eucalyptus	Version 1.1
Eucalyptus Eucalyptus	Version 1.2
Eucalyptus Eucalyptus	Version 1.3
Eucalyptus Eucalyptus	Version 1.4
Eucalyptus Eucalyptus	Version 1.5.1
Eucalyptus Eucalyptus	Version 1.5.2
Eucalyptus Eucalyptus	Version 1.6.2
Eucalyptus Eucalyptus	Version 1.6
Eucalyptus Eucalyptus	Version 2.0.0
Eucalyptus Eucalyptus	Version 2.0.1
Eucalyptus Eucalyptus	Version 2.0.2
Eucalyptus Eucalyptus	Version 2.0.3
Eucalyptus Eucalyptus	Version 2.0
Eucalyptus Eucalyptus	Version 3.0.1
Eucalyptus Eucalyptus	Version 3.0
Eucalyptus Eucalyptus	Version 3.1.0
Eucalyptus Eucalyptus	Version 3.1.1
Eucalyptus Eucalyptus	Version 3.1.2
Eucalyptus Eucalyptus	Version 3.2.0

Related CWEs

CWE-399

References (4)

http://www.eucalyptus.com/resources/security/advisories/esa-09

Source: cve@mitre.org

Vendor Advisory

https://eucalyptus.atlassian.net/browse/EUCA-5277

Source: cve@mitre.org

Vendor Advisory

http://www.eucalyptus.com/resources/security/advisories/esa-09

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://eucalyptus.atlassian.net/browse/EUCA-5277

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.