USN-1731-1: OpenStack Cinder vulnerability
21 February 2013
Cinder could be made to crash if it received specially crafted input.
- cinder - Cinder storage service - api server
Stuart Stent discovered that Cinder would allow XML entity processing. A
remote unauthenticated attacker could exploit this using the Cinder API to
cause a denial of service via resource exhaustion. (CVE-2013-1664)