CVE-2014-0105 python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware
Remote authenticated users can gain privileges via memcache token retrieval flaws in the OpenStack Keystone Python client library.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-0105?
CVE-2014-0105 is a medium-severity vulnerability in n/a, published on 15 Apr 2014. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."
Weakness: CWE-255
Which versions are affected by CVE-2014-0105?
3 open source packages ship an affected version, including python-keystoneclient. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
python-keystoneclient PyPI | All versions | 0.7.0 |
python-keystoneclient PyPI | All versions | 0.7.0 |
python-keystoneclient PyPI | All versions | 0.7.0 |
Linux distribution packages (8)
python-keystoneclient Red Hat:openstack:3::el6 | All versions | 1:0.2.3-8.el6ost |
python-keystoneclient-doc Red Hat:openstack:3::el6 | All versions | 1:0.2.3-8.el6ost |
python-keystoneclient Red Hat:openstack:4::el6 | All versions | 1:0.7.1-2.el6ost |
python-keystoneclient-doc Red Hat:openstack:4::el6 | All versions | 1:0.7.1-2.el6ost |
python-six Red Hat:openstack:4::el6 | All versions | 0:1.5.2-1.el6 |
python-keystoneclient Red Hat:storage:2.1:server:el6 | All versions | 1:0.7.1-2.el6ost |
python-keystoneclient-doc Red Hat:storage:2.1:server:el6 | All versions | 1:0.7.1-2.el6ost |
python-six Red Hat:storage:2.1:server:el6 | All versions | 0:1.5.2-1.el6 |
Products include Openstack Python-Keystoneclient.
How do I fix CVE-2014-0105?
Upgrade python-keystoneclient to 0.7.0 or later.
Is CVE-2014-0105 being exploited?
There is no known exploitation of CVE-2014-0105 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2014-0105, GHSA-gwvq-rgqf-993f, PYSEC-2014-70, RHSA-2014:0382, RHSA-2014:0409, RHSA-2014:0442.