CVE-2013-0270
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
A flaw in OpenStack Keystone allows a remote attacker to send a large HTTP request with a long tenant name when requesting a token, leading to excessive CPU and memory consumption and denial of service.
Risk Assessment
An attacker can overload the Keystone server, preventing user authentication and disrupting the entire OpenStack cloud.
Recommendation
Apply the vendor patch or restrict HTTP request sizes in the server configuration.
Original NVD description (English source)
A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU and memory resources on the affected system.