CVE-2013-0247
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
Exploit likelihood
What each source reports
NVD Score used
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
- Record
CVE-2013-0247- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
- Record
CVE-2013-0247- Updated
- 2026-11-02
EUVDEUVD-2013-0279 No score
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
- Record
EUVD-2013-0279- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fqpq-8vh2-cxwp No score
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
- Record
GHSA-fqpq-8vh2-cxwp- Updated
- 2026-11-02
OSV No score
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
- Record
CVE-2013-0247- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0247 No score
OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.
- Record
DEBIAN-CVE-2013-0247- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
keystoneDebian:12 |
before 2012.1.1-12 | 2012.1.1-12 |
keystoneDebian:13 |
before 2012.1.1-12 | 2012.1.1-12 |
keystoneDebian:14 |
before 2012.1.1-12 | 2012.1.1-12 |
openstack-keystoneRed Hat:openstack:2::el6 |
before 0:2012.2.1-3.el6ost | 0:2012.2.1-3.el6ost |
openstack-keystone-docRed Hat:openstack:2::el6 |
before 0:2012.2.1-3.el6ost | 0:2012.2.1-3.el6ost |
python-keystoneRed Hat:openstack:2::el6 |
before 0:2012.2.1-3.el6ost | 0:2012.2.1-3.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0247 is a medium vulnerability (CVSS 5.0) in Openstack Keystone, published February 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.24%, the 88th percentile. Fixed in keystone 2012.1.1-12.
References
bugzilla.redhat.com/show_bug.cgi?id=906171
bugs.launchpad.net/keystone/+bug/1098307
lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.html
rhn.redhat.com/errata/RHSA-2013-0253.html
ubuntu.com/usn/USN-1715-1
securityfocus.com/bid/57747
Show 10 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-0247
github.com/advisories/GHSA-fqpq-8vh2-cxwp
security-tracker.debian.org/tracker/CVE-2013-0247
access.redhat.com/errata/RHSA-2013:0253
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0253.json
cve.org/CVERecord?id=CVE-2013-0247