Skip to content
OpenAdvisories
Medium RHSA-2013:0708 2 CVEs

Red Hat Security Advisory: openstack-keystone security and bug fix update

Published Sep 15, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 2 openstack:2::el6 openstack-keystone 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-keystone-doc 0:2012.2.3-7.el6ost
Red Hat · OpenStack 2 openstack:2::el6 python-keystone 0:2012.2.3-7.el6ost

Vulnerabilities 2

  • Medium 6.5
    CVE-2013-0270

    Keystone: openstack keystone: denial of service via large http request with long tenant name

    A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU a…

    Red Hat Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.2 Debian PyPI
  • Medium 5.3
    CVE-2013-1865

    OpenStack Keystone Improper Authentication vulnerability

    OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.

    keystone PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=887815
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=888575
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=909012
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=917208
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=918159
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=922230
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0708.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0270
  • article
    http://rhn.redhat.com/errata/RHSA-2013-0708.html
  • article
    https://bugs.launchpad.net/keystone/+bug/1099025
  • article
    https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8
  • article
    https://github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdc
  • article
    https://launchpad.net/keystone/grizzly/2013.1
  • report
    https://access.redhat.com/security/cve/CVE-2013-1865
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1865
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1865