CVE-2013-2014 OpenStack Identity (Keystone) Denial of Service
MediumCVSS 5.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi keystone(PyPI) | < 8.0.0a0 | 8.0.0a0 |
| debian/keystone(Debian:12) | < 2013.1.1-2 | 2013.1.1-2 |
| debian/keystone(Debian:13) | < 2013.1.1-2 | 2013.1.1-2 |
| debian/keystone(Debian:14) | < 2013.1.1-2 | 2013.1.1-2 |
| OpenStack Keystone | >= 2013, < 2013.1 | 2013.1 |
| fedoraproject fedora | = 19 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- bugs.launchpad.net issue-tracking third-party-advisory
- bugs.launchpad.net issue-tracking third-party-advisory
- openstack-keystone-cve20132014-http-dos(84347) vdb-entry
- FEDORA-2013-10467 third-party-advisory vendor-advisory
- 53397 third-party-advisory
- 59936 third-party-advisory vdb-entry
- pypi.org product
- github.com vendor-advisory
- Debian Security Tracker CVE-2013-2014 vendor-advisory
- bugs.debian.org issue-tracking