OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade keystone | Jul 30, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade openstack-dashboardUpgrade openstack-nova-networkUpgrade openstack-cinder-docUpgrade openstack-swift-proxyUpgrade openstack-keystoneUpgrade openstack-quantumUpgrade openstack-nova-vncproxyUpgrade python-novaUpgrade python-glanceUpgrade openstack-swift-accountUpgrade openstack-swiftUpgrade openstack-swift-containerUpgrade python-cinderclient-testUpgrade openstack-quickstartUpgrade openstack-nova-objectstoreUpgrade python-quantumUpgrade openstack-nova-apiUpgrade python-cinderclient-docUpgrade openstack-nova-docUpgrade openstack-nova-testUpgrade openstack-nova-novncproxyUpgrade python-swiftUpgrade openstack-dashboard-testUpgrade openstack-cinderUpgrade python-keystoneclient-docUpgrade python-horizonUpgrade openstack-cinder-apiUpgrade openstack-swift-docUpgrade openstack-glance-docUpgrade openstack-nova-certUpgrade openstack-nova-computeUpgrade openstack-quantum-docUpgrade openstack-cinder-volumeUpgrade python-keystoneclient-testUpgrade openstack-swift-objectUpgrade python-django_openstack_authUpgrade openstack-novaUpgrade openstack-glance-testUpgrade openstack-nova-schedulerUpgrade openstack-cinder-schedulerUpgrade openstack-keystone-testUpgrade openstack-keystone-docUpgrade python-keystoneclientUpgrade openstack-swift-testUpgrade openstack-nova-volumeUpgrade openstack-glanceUpgrade python-cinderUpgrade python-cinderclientUpgrade openstack-cinder-testUpgrade openstack-quantum-testUpgrade python-keystone | Dec 12, 2013 | Feb 24, 2013 |
| Ubuntu | — | Upgrade python-keystone | Nov 8, 2024 | Feb 24, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub