CVE-2013-2014
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
02/06/2014
Last modified:
12/04/2025
Description
OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:* | 2013 (including) | 2013.1 (excluding) |
cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.fedoraproject.org/pipermail/package-announce/2013-July/111914.html
- http://secunia.com/advisories/53397
- http://www.securityfocus.com/bid/59936
- https://bugs.launchpad.net/keystone/+bug/1098177
- https://bugs.launchpad.net/keystone/+bug/1099025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84347
- http://lists.fedoraproject.org/pipermail/package-announce/2013-July/111914.html
- http://secunia.com/advisories/53397
- http://www.securityfocus.com/bid/59936
- https://bugs.launchpad.net/keystone/+bug/1098177
- https://bugs.launchpad.net/keystone/+bug/1099025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84347