CVE-2014-0105 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-0105 Interim 1 54 2023-05-16T00:58:41Z current 2021-05-30T13:17:28Z 2023-05-16T00:58:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-0105 The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached." The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Cloud 2.0 SUSE Cloud 4 SUSE Cloud 4 Dependencies SUSE Cloud 5 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE OpenStack Cloud 6 openSUSE Tumbleweed python-keystoneclient python-keystoneclient-1.0.0-14.1 python-keystoneclient-1.7.2-3.1 python-keystoneclient-3.5.0-1.1 python-keystoneclient-doc-1.0.0-14.1 python-keystoneclient-doc-1.7.2-3.1 python-keystoneclient-doc-3.5.0-1.1 python3-keystoneclient python3-keystoneclient-3.15.0-2.33 python-keystoneclient-1.0.0-14.1 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 python-keystoneclient-doc-1.0.0-14.1 as a component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 python3-keystoneclient-3.15.0-2.33 as a component of SUSE Linux Enterprise Module for Public Cloud 15 python3-keystoneclient-3.15.0-2.33 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python3-keystoneclient-3.15.0-2.33 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP2 python-keystoneclient-1.7.2-3.1 as a component of SUSE OpenStack Cloud 6 python-keystoneclient-doc-1.7.2-3.1 as a component of SUSE OpenStack Cloud 6 python-keystoneclient-3.5.0-1.1 as a component of openSUSE Tumbleweed python-keystoneclient-doc-3.5.0-1.1 as a component of openSUSE Tumbleweed python-keystoneclient as a component of SUSE Cloud 2.0 python-keystoneclient as a component of SUSE Cloud 4 python-keystoneclient as a component of SUSE Cloud 4 Dependencies python-keystoneclient as a component of SUSE Cloud 5 python3-keystoneclient as a component of SUSE Linux Enterprise Module for Public Cloud 15 python-keystoneclient as a component of SUSE Linux Enterprise Module for Public Cloud 15 python3-keystoneclient as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python-keystoneclient as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python3-keystoneclient as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP2 python-keystoneclient as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP2 The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached." CVE-2014-0105 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:python-keystoneclient-1.0.0-14.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:python-keystoneclient-doc-1.0.0-14.1 SUSE Linux Enterprise Module for Public Cloud 15:python3-keystoneclient-3.15.0-2.33 SUSE Linux Enterprise Module for Public Cloud 15 SP1:python3-keystoneclient-3.15.0-2.33 SUSE Linux Enterprise Module for Public Cloud 15 SP2:python3-keystoneclient-3.15.0-2.33 SUSE OpenStack Cloud 6:python-keystoneclient-1.7.2-3.1 SUSE OpenStack Cloud 6:python-keystoneclient-doc-1.7.2-3.1 openSUSE Tumbleweed:python-keystoneclient-3.5.0-1.1 openSUSE Tumbleweed:python-keystoneclient-doc-3.5.0-1.1 SUSE Cloud 2.0:python-keystoneclient SUSE Cloud 4 Dependencies:python-keystoneclient SUSE Cloud 4:python-keystoneclient SUSE Cloud 5:python-keystoneclient SUSE Linux Enterprise Module for Public Cloud 15 SP1:python-keystoneclient SUSE Linux Enterprise Module for Public Cloud 15 SP1:python3-keystoneclient SUSE Linux Enterprise Module for Public Cloud 15 SP2:python-keystoneclient SUSE Linux Enterprise Module for Public Cloud 15 SP2:python3-keystoneclient SUSE Linux Enterprise Module for Public Cloud 15:python-keystoneclient SUSE Linux Enterprise Module for Public Cloud 15:python3-keystoneclient moderate 6 AV:N/AC:M/Au:S/C:P/I:P/A:P