CVE-2013-0270: Openstack Keystone

Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days.

A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU and memory resources on the affected system.

Affected products

• Openstack Keystone: from 2012.1, up to and including 2012.1.3; from 2012.2, up to and including 2012.2.4; version 2013.1 only

Published 2013-04-12. Last modified 2026-07-30.