PT-2013-2186 · Openstack · Openstack Keystone

Dan Prince + 2 · Publicado 2013-02-24 · Atualizado 2018-11-15 · CVE-2013-0247

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions Essex 2012.1.3 and earlier OpenStack Keystone versions Folsom 2012.2.3 and earlier OpenStack Keystone versions Grizzly grizzly-2 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically disk consumption, by sending many invalid token requests. This triggers the excessive generation of log entries.

Recommendations For OpenStack Keystone versions Essex 2012.1.3 and earlier, update to a version later than 2012.1.3 to resolve the issue. For OpenStack Keystone versions Folsom 2012.2.3 and earlier, update to a version later than 2012.2.3 to resolve the issue. For OpenStack Keystone versions Grizzly grizzly-2 and earlier, update to a version later than grizzly-2 to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-0247

RHSA-2013:0253

Produtos afetados

Openstack Keystone

Referências · 10

• https://bugs.launchpad.net/keystone/+bug/1098307 · Nota
• http://ubuntu.com/usn/USN-1715-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-0247 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-0247 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-0253.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=906171 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-0247 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0247 · Nota de Segurança
• http://securityfocus.com/bid/57747 · Nota