PT-2013-4892

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions before 2013.1.3 OpenStack Compute Nova Havana versions before havana-3 Description The issue does not properly handle network source security group policy updates, allowing remote authenticated users to cause a...

CVE-2013-4179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The security group extension in OpenStack Compute Nova Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664...