Lucene search
GoogleOSV:GHSA-J6XH-Q826-55JWHistoryMay 17, 2022 - 4:58 a.m.
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
2022-05-1704:58:58
Google
osv.dev
8
0.09 Low
EPSS
Percentile
94.6%
The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.
References
Related
cvelist
cvelist
cve
cve
debiancve
debiancve
github
github
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
2022-05-17 04:58:58
XML Entity Expansion (XEE) in Django
2022-05-17 05:09:40
OpenStack Cinder Denial of Service using XML entities
2022-05-14 01:58:45
prion
prion
Security feature bypass
2013-09-16 19:14:00
Code injection
2013-04-03 00:55:00
Design/Logic Flaw
2013-09-16 19:14:00
nvd
nvd
ubuntucve
ubuntucve
securityvulns
securityvulns
[USN-1734-1] OpenStack Nova vulnerability
2013-02-24 00:00:00
[USN-1731-1] OpenStack Cinder vulnerability
2013-02-24 00:00:00
[USN-1730-1] OpenStack Keystone vulnerabilities
2013-02-24 00:00:00
nessus
nessus
Ubuntu 12.10 : cinder vulnerability (USN-1731-1)
2013-02-21 00:00:00
Ubuntu 11.10 / 12.04 LTS / 12.10 : nova vulnerability (USN-1734-1)
2013-02-22 00:00:00
Ubuntu 12.04 LTS / 12.10 : keystone vulnerabilities (USN-1730-1)
2013-02-21 00:00:00
ubuntu
ubuntu
OpenStack Cinder vulnerability
2013-02-21 00:00:00
OpenStack Nova vulnerability
2013-02-21 00:00:00
OpenStack Keystone vulnerabilities
2013-02-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:00:49
Denial Of Service (DoS)
2019-05-02 04:48:39
Denial Of Service (DoS)
2019-05-02 04:48:40
openvas
openvas
Ubuntu: Security Advisory (USN-1734-1)
2013-02-22 00:00:00
Ubuntu Update for cinder USN-1731-1
2013-02-22 00:00:00
Ubuntu Update for nova USN-1734-1
2013-02-22 00:00:00
redhat
redhat
(RHSA-2013:1199) Moderate: openstack-nova security and bug fix update
2013-09-03 00:00:00
(RHSA-2013:0658) Moderate: openstack-cinder security and enhancement update
2013-03-21 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2013-02-21 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: openstack-keystone-2012.2.3-3.fc18
2013-03-04 22:39:17
[SECURITY] Fedora 18 Update: openstack-keystone-2012.2.3-5.fc18
2013-04-08 22:52:02
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.3-2.fc19
2013-09-05 01:37:33
gentoo
gentoo
libxml2: Multiple vulnerabilities
2013-11-10 00:00:00
AMD64 x86 emulation base libraries: Multiple vulnerabilities
2014-12-12 00:00:00