CVE-2013-0247

2013-02-0500:00:00

ubuntu.com

0.014 Low

EPSS

Percentile

86.4%

JSON

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier,
and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial
of service (disk consumption) via many invalid token requests that trigger
excessive generation of log entries.

Bugs

<https://bugs.launchpad.net/keystone/+bug/1098307>

Notes

Author	Note
jdstrand	Keystone on 11.10 is a pre-release version and unusable with other components such as nova and horizon 2013.1~g2-0ubuntu1 is affected. Server team will provide this as part of their regular updates for Ubuntu 13.04 (deferring for now) reproducer in the bug

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchkeystone< 2012.1+stable~20120824-a16a0ab9-0ubuntu2.4UNKNOWN
ubuntu12.10noarchkeystone< 2012.2.1-0ubuntu1.1UNKNOWN