CVEvulnerability

CVE-2013-1664

5.0 MEDIUM Published 2013-04-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-04-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.

Affected configurations

• openstack cinder folsom • openstack compute \(nova\) essex • openstack compute \(nova\) folsom • openstack folsom • openstack grizzly • openstack keystone essex

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References