Every CVE Search/ Get API key

CVE-2013-2014

OpenStack Identity (Keystone) Denial of Service

5.0 MediumFix available

CVE-2013-2014 is a medium vulnerability (CVSS 5.0) in Openstack Keystone, published June 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.27%, the 88th percentile. Fixed in keystone 8.0.0a0.

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Exploit likelihood

3.27%Up 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
CVE-2013-2014
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
CVE-2013-2014
Updated
2026-11-02
EUVDEUVD-2022-2897 No score

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
EUVD-2022-2897
Updated
2026-11-03
GitHub AdvisoriesGHSA-7332-36h8-8jh8 No score

OpenStack Identity (Keystone) Denial of Service

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
GHSA-7332-36h8-8jh8
Weakness
CWE-20
Updated
2026-11-02
OSV No score

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
CVE-2013-2014
Updated
2026-11-02
OSVDEBIAN-CVE-2013-2014 No score

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
DEBIAN-CVE-2013-2014
Updated
2026-11-02
OSVGHSA-7332-36h8-8jh8 No score

OpenStack Identity (Keystone) Denial of Service

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
GHSA-7332-36h8-8jh8
Weakness
CWE-20
Updated
2026-11-02
OSVPYSEC-2026-651 No score

OpenStack Identity (Keystone) Denial of Service

OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

Record
PYSEC-2026-651
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
keystone
PyPI
before 8.0.0a0
8.0.0a0
keystone
Debian:12
before 2013.1.1-2
2013.1.1-2
keystone
Debian:13
before 2013.1.1-2
2013.1.1-2
keystone
Debian:14
before 2013.1.1-2
2013.1.1-2

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less
MoveEnter Open