CVE-2013-4769

The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows remote attackers to cause a denial of service (traffic amplification) via spoofed DNS queries.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2014-12-26

Last modified

2024-08-06

Weaknesses

CWE-19

Affected products

• Eucalyptus (Eucalyptus)

References

• https://www.eucalyptus.com/resources/security/advisories/esa-16