Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-4179

The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.3%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2013-4179
  • Openstack » Compute » Version: 2013.1.3
    cpe:2.3:a:openstack:compute:2013.1.3
  • Openstack » Havana » Version: 2013.2.1
    cpe:2.3:a:openstack:havana:2013.2.1
  • Openstack » Havana » Version: havana-1
    cpe:2.3:a:openstack:havana:havana-1
  • Openstack » Havana » Version: havana-2
    cpe:2.3:a:openstack:havana:havana-2


Products
Pricing
Contact Us

Shodan ® - All rights reserved