Fedora Update for eucalyptus FEDORA-2013-6117

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : eucalyptus-3.2.2-1.fc18 (2013-6117)

Eucalyptus 3.2.1 contained two vulnerabilities related to its Walrus object store. The first CVE-2012-4067 was a parsing vulnerability which could allow a Denial of Service attack, and the second CVE-2013-2296 allowed unauthorized authenticated users to enable and access bucket activity logs. The...

CVE-2012-4067

CVE-2012-4067 affects Eucalyptus Walrus prior to version 3.2.2. A crafted XML message containing a DTD can trigger a denial-of-service by exhausting memory, threads, and CPU resources, demonstrated via a bucket-logging request. Related entries also reference CVE-2013-2296. Multiple connected sour...