| ID |
CVE-2013-4202
|
| Summary |
The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:openstack:cinder:2013.1:-:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1:-:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1:rc1:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1:rc1:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1:rc2:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1:rc2:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1:rc3:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1:rc3:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.0:-:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.0:-:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.0:rc1:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.0:rc2:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.0:rc3:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.0:rc3:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.1:*:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.2:*:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.2:*:*:*:*:*:*:*
-
cpe:2.3:a:openstack:cinder:2013.1.3:*:*:*:*:*:*:*
cpe:2.3:a:openstack:cinder:2013.1.3:*:*:*:*:*:*:*
-
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 4.3 (as of 13-02-2023 - 04:45) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-399 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
| redhat
via4
|
| advisories | | | rpms | - openstack-cinder-0:2013.1.3-2.el6ost
- openstack-cinder-doc-0:2013.1.3-2.el6ost
- python-cinder-0:2013.1.3-2.el6ost
|
|
| refmap
via4
|
|
| Last major update |
13-02-2023 - 04:45 |
| Published |
16-09-2013 - 19:14 |
| Last modified |
13-02-2023 - 04:45 |
