Total vulnerabilities in the database
OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token.
| Software | From | Fixed in |
|---|---|---|
| openstack / keystone | 2012.1 | 2012.1.3.x |
| openstack / keystone | 2012.2 | 2012.2.4.x |
| openstack / keystone | 2013.1-milestone1 | 2013.1-milestone1.x |
| openstack / keystone | 2013.1-milestone2 | 2013.1-milestone2.x |
| openstack / keystone | 2013.1-milestone3 | 2013.1-milestone3.x |