CVE-2012-4573: openstack essex

EPSS trend

Probability

3.35%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.35% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.35%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

28 links

secunia.com/advisories/51174Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryWEBAdvisory
secunia.com/advisories/51234Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryWEBAdvisory
www.ubuntu.com/usn/USN-1626-1Vendor AdvisoryX Refsource UBUNTUWEBAdvisory
rhn.redhat.com/errata/RHSA-2012-1558.htmlVendor AdvisoryX Refsource REDHATWEBAdvisory
www.securityfocus.com/bid/56437VDB EntryX Refsource BIDWEB
github.com/openstack/glance/commit/90bcdc5a89e350a358cf320a03f5afe99795f6f6X Refsource CONFIRMWEBFIX
lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.htmlVendor AdvisoryX Refsource FEDORAWEB
www.openwall.com/lists/oss-security/2012/11/07/6Mailing ListX Refsource MLISTWEB
www.openwall.com/lists/oss-security/2012/11/09/5Mailing ListX Refsource MLISTWEB
packetstormsecurity.com/files/118733/Red-Hat-Security-Advisory-2012-1558-01.htmlX Refsource MISCWEB

Show all 28 references

osvdb.org/87248VDB EntryX Refsource OSVDBWEB
github.com/openstack/glance/commit/6ab0992e5472ae3f9bef0d2ced41030655d9d2bcX Refsource CONFIRMWEBFIX
www.ubuntu.com/usn/USN-1626-2Vendor AdvisoryX Refsource UBUNTUWEBAdvisory
bugs.launchpad.net/glance/+bug/1065187X Refsource CONFIRMWEB
lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.htmlVendor AdvisoryX Refsource SUSEWEB
github.com/openstack/glance/commit/efd7e75b1f419a52c7103c7840e24af8e5deb29dX Refsource CONFIRMPatchWEBFIX
exchange.xforce.ibmcloud.com/vulnerabilities/79895VDB EntryX Refsource XFWEB
nvd.nist.gov/vuln/detail/CVE-2012-4573Advisory
github.com/openstack/glancePACKAGE
github.com/pypa/advisory-database/tree/main/vulns/glance/PYSEC-2012-29.yamlWEB
github.com/advisories/GHSA-6rrm-xxvh-7r87Advisory
access.redhat.com/errata/RHSA-2012:1558Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=872302REPORT
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1558.jsonAdvisory
access.redhat.com/security/cve/CVE-2012-4573REPORT
www.cve.org/CVERecord?id=CVE-2012-4573Advisory
security-tracker.debian.org/tracker/CVE-2012-4573Advisory

Related vulnerabilities

CVE-2013-2161debianswift+111.91%13y ago20-08-2013 22:00XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.CVE-2013-2096debiannova+40.39%13y ago09-07-2013 17:00OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.CVE-2013-2030openstackcompute+40.24%12y ago27-12-2013 01:00keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.CVE-2013-1865canonicalubuntu_linux+22.63%13y ago22-03-2013 21:00OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.CVE-2013-1664debiancinder+94.77%13y ago03-04-2013 00:00The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.CVE-2013-1665debiankeystone+44.51%13y ago03-04-2013 00:00The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

All vulnerabilities inessex folsom image_registry_and_delivery_service_\(glance\)

CVE-2012-4573: openstack essex

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References