CVE-2013-0270
OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 1.81%
- CWE
- CWE-1284
- Published
- 2013-04-12
- Last modified
- 2026-07-30
Affected products
- n/a n/a
- Red Hat OpenStack Folsom for RHEL 6
Weakness type
Related vulnerabilities
- CVE-2025-9316 — N-central unauthenticated sessionID generation
- CVE-2026-87470 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to pote
- CVE-2023-54337 — Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
- CVE-2026-21485 — iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()
- CVE-2025-8320 — Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability
- CVE-2025-15080 — Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products
- CVE-2025-14869 — Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-8424 — Improper access control on the NetScaler Management Interface