eucalyptus: denial of service and information disclosure
Package(s): | eucalyptus | CVE #(s): | CVE-2012-4067 CVE-2013-2296 | ||||
Created: | January 1, 2014 | Updated: | January 1, 2014 | ||||
Description: | Eucalyptus contains two vulnerabilities in the "Walrus" object store. An XML parsing problem (CVE-2012-4067, ESA-09) can enable unspecified denial of service attacks, while a missing authentication step (CVE-2013-2296, ESA-10) could allow unauthorized access to the internal bucket logs. | ||||||
Alerts: |
|