CVE-2013-0270: openstack keystone
CVSS: 6.5v3.1MediumModified
AliasesGHSA-4ppj-4p4v-jf4pPYSEC-2026-650DEBIAN-CVE-2013-0270
Published 12-04-2013Last modified 30-07-2026
Vulnerability summary
CVE-2013-0270 is a medium (CVSS 6.5) vulnerability in openstack keystone. EPSS estimates a 3.16% chance of exploitation in the next 30 days, higher than 87.8% of scored vulnerabilities.
CVSS score
6.5/10
010
Medium · v3.1 (CVE.org)EPSS score
3.16%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 12-04-2013PublishedVulnerability first disclosed.
- 30-07-2026Last modifiedVulnerability information updated.
Description
A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU and memory resources on the affected system.
CVSS metrics
5 scores · 4 sources · 2 versionsMedium 6.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 4 agree
- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · PypiEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
3.16%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.16% on 19-09-2026
19-09-202619-10-2026
EPSS score3.16%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-1284Improper Validation of Specified Quantity in InputThe product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
- CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Affected systems
Debian1 product
- keystone< 2013.1.1-2
Openstack1 product
- keystone≥ 2012.1, ≤ 2012.1.3 | ≥ 2012.2, ≤ 2012.2.4 | 2013.1:milestone1 | 2013.1:milestone2 | 2013.1:milestone3
PyPI1 product
- keystone< 8.0.0a0
3 vendors · 3 products
References
12 links- github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8Third Party AdvisoryWEB
- github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdcThird Party AdvisoryWEB
- pypi.org/project/keystonePACKAGE
