CVE-2013-0270

A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU and memory resources on the affected system.

• CWE-1284
• CWE-119

• http://rhn.redhat.com/errata/RHSA-2013-0708.htmlThird Party Advisory
• https://access.redhat.com/errata/RHSA-2013:0708
• https://access.redhat.com/security/cve/CVE-2013-0270
• https://bugs.launchpad.net/keystone/+bug/1099025Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=909012Third Party Advisory
• https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8Third Party Advisory
• https://github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdcThird Party Advisory
• https://launchpad.net/keystone/grizzly/2013.1Patch, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0708.htmlThird Party Advisory
• https://bugs.launchpad.net/keystone/+bug/1099025Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=909012Third Party Advisory
• https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8Third Party Advisory
• https://github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdcThird Party Advisory
• https://launchpad.net/keystone/grizzly/2013.1Patch, Third Party Advisory

Published

Apr 12, 2013

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0264An import error was introduced in Cumin in the code refactor…7.5
• CVE-2013-0265The redirect_stderr function in xnbd_common.c in xnbd-server…
• CVE-2013-0266A flaw was found in the `puppetlabs-cinder` module, as used …5.5
• CVE-2013-0267The Privileges portion of the web GUI and the XMLRPC API in …
• CVE-2013-0268The msr_open function in arch/x86/kernel/msr.c in the Linux …
• CVE-2013-0269The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x bef…
• CVE-2013-0271The MXit protocol plugin in libpurple in Pidgin before 2.10.…
• CVE-2013-0272Buffer overflow in http.c in the MXit protocol plugin in lib…
• CVE-2013-0273sametime.c in the Sametime protocol plugin in libpurple in P…
• CVE-2013-0274upnp.c in libpurple in Pidgin before 2.10.7 does not properl…
• CVE-2013-0275Multiple cross-site scripting (XSS) vulnerabilities in Gangl…
• CVE-2013-0276ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.…