CVE-2012-1572

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
keystoneKeystone2014.1.3

References

Timeline

Published
Nov 12, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-15735.0gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, whiCVE-2012-15746.5The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, CVE-2012-15754.3Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via CVE-2012-15766.0The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0.0-beta2 does not proCVE-2012-15779.8lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.CVE-2012-15786.8Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackersCVE-2012-15795.0The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript filCVE-2012-15806.8Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote aCVE-2012-15815.0MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remoteCVE-2012-15824.3Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attCVE-2012-15835.0Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnCVE-2012-15844.3Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a deni
CVE-2012-1572: High severity, CVSS 7.5 | Vulnix