CVE:CVE-2013-1664
CNNVD:CNNVD-201302-439
OpenStack是由Rackspace和NASA共同开发的云计算平台，帮助服务商和企业内部实现类似于Amazon EC2和S3的云基础架构。
多款OpenStack产品中存在拒绝服务漏洞，该漏洞源于在扩展XML实体时存在错误。攻击者利用该漏洞通过特制的XML文档，消耗系统大量内存，并使系统崩溃或挂起。
solution:Upgrade openstack cinder_folsom to a higher version than -; Upgrade openstack compute_(nova)_essex to a higher version than -; Upgrade openstack compute_(nova)_folsom to a higher version than -; Upgrade openstack folsom to a higher version than -; Upgrade openstack grizzly to a higher version than -; Upgrade openstack keystone_essex to a higher version than -