Veracode Vulnerability DatabaseVERACODE:11482Denial Of Service (DoS)
0.008 Low
EPSS
Percentile
81.3%
openstack-keystone is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka “authentication chaining.”
References
rhn.redhat.com/errata/RHSA-2014-1688.html
www.openwall.com/lists/oss-security/2014/04/10/20
access.redhat.com/security/updates/classification/#important
bugs.launchpad.net/keystone/+bug/1300274
bugzilla.redhat.com/show_bug.cgi?id=1082669
bugzilla.redhat.com/show_bug.cgi?id=1099628
bugzilla.redhat.com/show_bug.cgi?id=1146083
rhn.redhat.com/errata/RHSA-2014-1688.html
wiki.openstack.org/wiki/ReleaseNotes/2013.2.4
Related
