affected:
- package:
    ecosystem: PyPI
    name: keystone
    purl: pkg:pypi/keystone
  ranges:
  - events:
    - introduced: '0'
    - fixed: 8.0.0a0
    type: ECOSYSTEM
aliases:
- CVE-2014-2828
- GHSA-6mv3-p2gr-wgqf
details: The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse
  before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption)
  via a large number of the same authentication method in a request, aka "authentication
  chaining."
id: PYSEC-2014-106
modified: '2024-11-25T18:35:18.357593Z'
published: '2014-04-15T14:55:00Z'
references:
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2014/04/10/20
- type: WEB
  url: https://bugs.launchpad.net/keystone/+bug/1300274
- type: ADVISORY
  url: http://rhn.redhat.com/errata/RHSA-2014-1688.html