CVE-2013-0247

Published: 5 February 2013

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

Notes

Keystone on 11.10 is a pre-release version and unusable with other
components such as nova and horizon
2013.1~g2-0ubuntu1 is affected. Server team will provide this as
part of their regular updates for Ubuntu 13.04 (deferring for now)
reproducer in the bug

Status

References

• http://lists.openstack.org/pipermail/openstack-announce/2013-February/000074.html
• https://ubuntu.com/security/notices/USN-1715-1
• https://www.cve.org/CVERecord?id=CVE-2013-0247
• NVD
• Launchpad
• Debian

Bugs

• https://bugs.launchpad.net/keystone/+bug/1098307