CVE-2013-2014: Input Validation
Published Jun 2, 2014
·Updated
OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.
Affected Software
3 affected componentsFixes available
pip/keystone<8.0.0a0
8.0.0a0
Openstack Keystone>=2013<2013.1
Fedoraproject Fedora=19
Event History
Jun 2, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
DescriptionSeverityWeaknessAffected Software
May 13, 2022
Advisory Published
via GitHub·01:26 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-2014?
CVE-2013-2014 is classified as a denial of service vulnerability due to its potential to cause significant memory consumption and crashes.
2
How do I fix CVE-2013-2014?
To mitigate CVE-2013-2014, upgrade OpenStack Identity (Keystone) to version 8.0.0a0 or later.
3
Which versions of Keystone are affected by CVE-2013-2014?
CVE-2013-2014 affects Keystone versions before 2013.1.
4
Can CVE-2013-2014 be exploited remotely?
Yes, CVE-2013-2014 can be exploited remotely by sending multiple long requests to the Keystone service.
5
What specific software is impacted by CVE-2013-2014?
CVE-2013-2014 impacts OpenStack Keystone versions prior to 2013.1 and Fedora version 19.