1. Home
  2. CVE Database
  3. CVE-2013-4768
MEDIUM · 5.0

CVE-2013-4768

The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), ...

Vulnerability Description

The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMware Broker (VB).

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
EucalyptusEucalyptus2.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2013-4768?

CVE-2013-4768 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), ...

How severe is CVE-2013-4768?

CVE-2013-4768 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4768?

Check the references section above for vendor advisories and patch information. Affected products include: Eucalyptus Eucalyptus.