GCVE - cpe:2.3:a:eucalyptus:eucalyptus:3.3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:eucalyptus:eucalyptus:3.3.0:*:*:*:*:*:*:*

part: a version: 3.3.0 update: *

Vendor	Eucalyptus (`209e9eb7-77d4-5657-ba62-5a3c541b3346`)
Product	Eucalyptus (`c3c50bc9-04dd-57e5-8fad-4735be372cba`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/eucalyptus/eucalyptus`	purl2cpe	2026-06-01 10:13:31.047482

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5038`	vulnerable	2026-06-08 05:05:46.776765	Details available Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files. Published: 2014-11-07T19:00:00.000Z Updated: 2024-08-06T11:34:37.291Z Open on db.gcve.eu Reference links https://www.eucalyptus.com/resources/security/advisories/esa-26	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4769`	vulnerable	2026-06-08 05:04:49.624013	Details available The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled setting is used, allows remote attackers to cause a denial of service (traffic amplification) via spoofed DNS queries. Published: 2014-12-26T23:00:00.000Z Updated: 2024-08-06T16:52:27.078Z Open on db.gcve.eu Reference links https://www.eucalyptus.com/resources/security/advisories/esa-16	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4768`	vulnerable	2026-06-08 05:04:49.619100	Details available The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMware Broker (VB). Published: 2014-04-15T22:00:00.000Z Updated: 2024-08-06T16:52:27.072Z Open on db.gcve.eu Reference links https://www.eucalyptus.com/resources/security/advisories/esa-15	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4767`	vulnerable	2026-06-08 05:04:49.618392	Details available Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors. Published: 2013-10-10T00:00:00.000Z Updated: 2024-09-16T17:23:47.129Z Open on db.gcve.eu Reference links http://osvdb.org/98180 http://www.eucalyptus.com/resources/security/advisories	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.