Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2013-0247

Published: 24/02/2013 Updated: 15/11/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Openstack

Vulnerability Summary

OpenStack Keystone Essex 2012.1.3 and previous versions, Folsom 2012.2.3 and previous versions, and Grizzly grizzly-2 and previous versions allows remote malicious users to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

openstack keystone

canonical ubuntu linux 12.04

canonical ubuntu linux 12.10

Vendor Advisories

Red Hat: Moderate: openstack-keystone security and bug fix update
Synopsis Moderate: openstack-keystone security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated openstack-keystone packages that fix one security issue and twobugs are now available for Red Hat OpenStack FolsomThe Red Hat Security Response Team has rated this update as having mode ...
Ubuntu Security Notice: keystone vulnerability
Keystone could be made to fill server disks with error messages ...
Debian CVElist Bug Report Logs: keystone: CVE-2013-2014 DoS via large POST requests
Debian Bug report logs - #708515 keystone: CVE-2013-2014 DoS via large POST requests Package: keystone; Maintainer for keystone is Debian OpenStack <team+openstack@trackerdebianorg>; Source for keystone is src:keystone (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 16 May 2013 09:27:02 U ...
Debian CVElist Bug Report Logs: keystone: CVE-2013-1664 (DoS in xml entitiy parsing) and CVE-2013-1665 (nformation leak via xml entity parsing)
Debian Bug report logs - #700948 keystone: CVE-2013-1664 (DoS in xml entitiy parsing) and CVE-2013-1665 (nformation leak via xml entity parsing) Package: keystone; Maintainer for keystone is Debian OpenStack <team+openstack@trackerdebianorg>; Source for keystone is src:keystone (PTS, buildd, popcon) Reported by: Thomas Goi ...
Debian CVElist Bug Report Logs: keystone: CVE-2013-0247: Keystone denial of service through invalid token requests
Debian Bug report logs - #699835 keystone: CVE-2013-0247: Keystone denial of service through invalid token requests Package: keystone; Maintainer for keystone is Debian OpenStack <team+openstack@trackerdebianorg>; Source for keystone is src:keystone (PTS, buildd, popcon) Reported by: Salvatore Bonaccorso <carnil@debian ...
Debian CVElist Bug Report Logs: CVE-2013-0282: Ensure EC2 users and tenant are enabled
Debian Bug report logs - #700947 CVE-2013-0282: Ensure EC2 users and tenant are enabled Package: keystone; Maintainer for keystone is Debian OpenStack <team+openstack@trackerdebianorg>; Source for keystone is src:keystone (PTS, buildd, popcon) Reported by: Thomas Goirand <zigo@debianorg> Date: Tue, 19 Feb 2013 16: ...

References

CWE-399http://www.ubuntu.com/usn/USN-1715-1https://bugs.launchpad.net/keystone/+bug/1098307http://www.securityfocus.com/bid/57747https://bugzilla.redhat.com/show_bug.cgi?id=906171http://rhn.redhat.com/errata/RHSA-2013-0253.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.htmlhttps://access.redhat.com/errata/RHSA-2013:0253https://usn.ubuntu.com/1715-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook