GitHub Advisoryadvisory · PyPI
GHSA-7332-36h8-8jh8 OpenStack Identity (Keystone) Denial of Service
MEDIUM
Official page ↗
- Aliases
- CVE-2013-2014
- Ecosystem
- PyPI
- Packages
- keystone
- Severity
- Moderate
- Weaknesses
- CWE-20
- Reviewed
- 2024-05-14
Affected packages
• PyPI keystone: < 8.0.0a0 → fixed in 8.0.0a0
Description
OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.
Related
Alias · CVE (1)
- CVE-2013-2014 OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via… vulnerability
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-2014 advisory
- https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8 web
- https://bugs.launchpad.net/keystone/+bug/1098177 web
- https://bugs.launchpad.net/keystone/+bug/1099025 web
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84347 web
- http://lists.fedoraproject.org/pipermail/package-announce/2013-July/111914.html web
- http://secunia.com/advisories/53397 web
- http://www.securityfocus.com/bid/59936 web