CVE-2013-2014

Currently unrated

Key Information:

Vendor
Openstack
Status
Keystone
Vendor
CVE Published:
2 June 2014

Summary

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/84347
vdb-entryx_refsource_XF
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA
https://bugs.launchpad.net/keystone/+bug/1098177
x_refsource_CONFIRM

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.