NetSight
medium4.3

CVE-2013-4769

The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows remote attackers to…

Impact

The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows remote attackers to cause a denial of service (traffic amplification) via spoofed DNS queries.

Affected products

VendorProductAffected versions
EucalyptusEucalyptus
Versions 3.3.0, 3.3.1, 3.3.2, 3.4.0, 3.4.1

Weakness classification

References