cbcvebase.
CVE-2013-0247
published 2013-02-24

CVE-2013-0247: OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of…

medium5CVSS 3.1
AVNACLAuNCNINAP
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

Affected

10 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
debiankeystone< keystone 2012.1.1-12 (bookworm)keystone 2012.1.1-12 (bookworm)
openstackkeystone>= 0 < 2012.1.1-122012.1.1-12
openstackkeystone>= 0 < 2012.1.1-122012.1.1-12
openstackkeystone>= 0 < 2012.1.1-122012.1.1-12
openstackkeystone>= 0 < 2012.1.1-122012.1.1-12
openstackkeystone2012.1 – 2012.1.3
openstackkeystone2012.2 – 2012.2.3
openstackkeystone2013.1 – 2013.1.2

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM