CVE-2013-4180

EUVD-2013-4103
The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service (memory consumption) via unspecified input that is converted to a symbol.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
redhatopenstack
3.0
theforemanforeman
𝑥
≤ 1.2.1
theforemanforeman
1.2.0
theforemanforeman
1.2.0:rc1
theforemanforeman
1.2.0:rc2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
foreman
lucid
dne
precise
dne
quantal
dne
raring
dne
Common Weakness Enumeration
References
http://projects.theforeman.org/issues/2860
http://rhn.redhat.com/errata/RHSA-2013-1196.html
http://theforeman.org/manuals/1.2/index.html#Releasenotesfor1.2.2
http://projects.theforeman.org/issues/2860
http://rhn.redhat.com/errata/RHSA-2013-1196.html
http://theforeman.org/manuals/1.2/index.html#Releasenotesfor1.2.2