VulnerabilityModified

CVE-2013-0247

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of…

MEDIUM 5.0EPSS 3.24%

Does this matter?

Lower severity and a low EPSS score (3.24%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 3.24% probability · 88th percentile
CISA KEV: Not listed
Weakness: CWE-399
Affected: openstack/keystone · canonical/ubuntu linux
Source: secalert@redhat.com

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0253.htmlThird Party Advisory
http://www.securityfocus.com/bid/57747Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1715-1Third Party Advisory
https://bugs.launchpad.net/keystone/+bug/1098307Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=906171Patch, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0253.htmlThird Party Advisory
http://www.securityfocus.com/bid/57747Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1715-1Third Party Advisory
https://bugs.launchpad.net/keystone/+bug/1098307Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=906171Patch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.