Intel

CVE-2013-0247

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to … (CVE-2013-0247)

noneEPSS 3.2%

Description

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

Source: CVELISTV5NVD

Metrics

Severity
none
Priority score
52.49
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
—
CVSS v3
—
CVSS v4
—
EPSS percentile
87.6 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
EPSS score
3.2 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2013-02-24 19:00 UTC
CWE
—

Affected operating systems

  • linux

    canonical / ubuntu_linux12.04

  • linux

    canonical / ubuntu_linux12.10

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • openstack

    keystone2012.1 – 2012.1.3

  • openstack

    keystone2012.2 – 2012.2.3

  • openstack

    keystone2013.1 – 2013.1.2

References & sources

IDCVE-2013-0247