CVE-2013-4261 in OpenStack
要約 (英語)
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
Be aware that VulDB is the high quality source for vulnerability data.
予約する
2013年06月12日
公開
2013年10月29日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 65389 | Red Hat OpenStack Backend メモリ破損 | 119 | 未定義 | 未定義 | CVE-2013-4261 |