The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html - | |
| References | () http://bugs.python.org/issue17239 - | |
| References | () http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html - Vendor Advisory | |
| References | () http://rhn.redhat.com/errata/RHSA-2013-0657.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2013-0658.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2013-0670.html - | |
| References | () http://ubuntu.com/usn/usn-1757-1 - | |
| References | () http://www.openwall.com/lists/oss-security/2013/02/19/2 - | |
| References | () http://www.openwall.com/lists/oss-security/2013/02/19/4 - | |
| References | () https://bugs.launchpad.net/nova/+bug/1100282 - Exploit |
Information
Published : 2013-04-03 00:55
Updated : 2024-11-21 01:50
NVD link : CVE-2013-1664
Mitre link : CVE-2013-1664
CVE.ORG link : CVE-2013-1664
JSON object : View
Products Affected
openstack
- grizzly
- keystone_essex
- compute_\(nova\)_essex
- compute_\(nova\)_folsom
- folsom
- cinder_folsom
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer