Openstack · Openstack Keystone · CVE-2013-0247
**Name of the Vulnerable Software and Affected Versions**
OpenStack Keystone versions Essex 2012.1.3 and earlier
OpenStack Keystone versions Folsom 2012.2.3 and earlier
OpenStack Keystone versions Grizzly grizzly-2 and earlier
**Description**
The issue allows remote attackers to cause a denial of service, specifically disk consumption, by sending many invalid token requests. This triggers the excessive generation of log entries.
**Recommendations**
For OpenStack Keystone versions Essex 2012.1.3 and earlier, update to a version later than 2012.1.3 to resolve the issue.
For OpenStack Keystone versions Folsom 2012.2.3 and earlier, update to a version later than 2012.2.3 to resolve the issue.
For OpenStack Keystone versions Grizzly grizzly-2 and earlier, update to a version later than grizzly-2 to resolve the issue.