OpenStack Identity (keystone)

  1. Bug #1100282
  2. Comment #9

Comment 9 for bug 1100282

Revision history for this message
Dolph Mathews (dolph) wrote : Re: DoS through XML entity expansion

I think the description is accurate, but you could be more specific, I suppose. Instead of:

> an unauthenticated attacker may crash the Keystone API server, resulting in a denial of service.

... change to:

> an unauthenticated attacker may consume excessive resources on the Keystone API server, resulting in a denial of service and potentially a crash.