OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.

References

• https://nvd.nist.gov/vuln/detail/CVE-2013-2014
• https://bugs.launchpad.net/keystone/+bug/1098177
• https://bugs.launchpad.net/keystone/+bug/1099025
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84347
• http://lists.fedoraproject.org/pipermail/package-announce/2013-July/111914.html
• http://secunia.com/advisories/53397
• http://www.securityfocus.com/bid/59936
• openstack/keystone@7691276