Lucene search

K
cve[email protected]CVE-2013-0247
HistoryFeb 24, 2013 - 7:55 p.m.

CVE-2013-0247

2013-02-2419:55:01
CWE-399
web.nvd.nist.gov
27
openstack
keystone
denial of service
vulnerability
cve-2013-0247
nvd

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.4%

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

Affected configurations

NVD
Node
openstackkeystoneRange2012.12012.1.3
OR
openstackkeystoneRange2012.22012.2.3
OR
openstackkeystoneRange2013.12013.1.2
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch12.10

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.4%