CVE-2013-0270— Keystone: openstack keystone: denial of service via large http request with long tenant name
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-0270
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Keystone: openstack keystone: denial of service via large http request with long tenant name
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU and memory resources on the affected system.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1284
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenStack Keystone 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。Grizzly是其发布的第7版本代号，它对大规模的生产环境、企业应用场景和更广泛的软件定义网络提供了更好的支持。OpenStack Keystone是其中的一个用于身份验证的项目，提供身份、令牌、目录和策略服务。 OpenStack Keystone Grizzly 2013.1之前版本，Folsom，以及可能更早的版
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenStack Platform 13 (Queens) | - | cpe:/a:redhat:openstack:13 | |
| Red Hat | Red Hat OpenStack Platform 16.2 | - | cpe:/a:redhat:openstack:16.2 | |
| Red Hat | Red Hat OpenStack Platform 16.2 | - | cpe:/a:redhat:openstack:16.2 | |
| Red Hat | Red Hat OpenStack Platform 17.1 | - | cpe:/a:redhat:openstack:17.1 | |
| Red Hat | Red Hat OpenStack Platform 17.1 | - | cpe:/a:redhat:openstack:17.1 | |
| Red Hat | Red Hat OpenStack Platform 18.0 | - | cpe:/a:redhat:openstack:18.0 | |
| Red Hat | Red Hat OpenStack Platform 18.0 | - | cpe:/a:redhat:openstack:18.0 |
II. Public POCs for CVE-2013-0270
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-0270
请登录查看更多情报信息。
- 🔗 https://launchpad.net/keystone/grizzly/2013.1x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=909012x_refsource_MISC
- 🔗 https://bugs.launchpad.net/keystone/+bug/1099025x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2013-0270
IV. Related Vulnerabilities
Same vendor: Red Hat
- CVE-2026-42011
Gnutls: gnutls: security bypass due to incorrect name constr - CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in u - CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2026-34956
Openvswitch: open vswitch: denial of service via malformed f - CVE-2026-34002
Xorg: xwayland: x.org x server: information disclosure or de
Same weakness: CWE-1284
- CVE-2026-25863
Conditional Fields for Contact Form 7 < 2.7.3 DoS via Uncont - CVE-2025-14688
IBM® Db2® is vulnerable to a denial of service when fetching - CVE-2026-6915
Flaw in the updateUser Command May Allow Unauthorized Config - CVE-2026-1352
IBM® Db2® is vulnerable to a trap or return SQLCODE -901 whe - CVE-2026-6839
ONE 安全漏洞
V. Comments for CVE-2013-0270
No comments yet