{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/34863?format=json","vulnerability_id":"VCID-7n2d-dh67-z7bv","summary":"The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an \"interaction between eventlet and python-memcached.\"","aliases":[{"alias":"CVE-2014-0105"},{"alias":"PYSEC-2014-70"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/7978?format=json","purl":"pkg:pypi/python-keystoneclient@0.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.7.0"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/7693?format=json","purl":"pkg:pypi/python-keystoneclient@0.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/7694?format=json","purl":"pkg:pypi/python-keystoneclient@0.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/7695?format=json","purl":"pkg:pypi/python-keystoneclient@0.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/7696?format=json","purl":"pkg:pypi/python-keystoneclient@0.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/7697?format=json","purl":"pkg:pypi/python-keystoneclient@0.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/7698?format=json","purl":"pkg:pypi/python-keystoneclient@0.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/7699?format=json","purl":"pkg:pypi/python-keystoneclient@0.2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-93qq-6jdh-h3fg"},{"vulnerability":"VCID-amgw-7mt1-43dn"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"},{"vulnerability":"VCID-tp6c-xf5e-xkah"},{"vulnerability":"VCID-wudn-x7h6-7ffs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/7700?format=json","purl":"pkg:pypi/python-keystoneclient@0.2.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-93qq-6jdh-h3fg"},{"vulnerability":"VCID-amgw-7mt1-43dn"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.2.4"},{"url":"http://public2.vulnerablecode.io/api/packages/7968?format=json","purl":"pkg:pypi/python-keystoneclient@0.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-93qq-6jdh-h3fg"},{"vulnerability":"VCID-amgw-7mt1-43dn"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/7969?format=json","purl":"pkg:pypi/python-keystoneclient@0.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/7970?format=json","purl":"pkg:pypi/python-keystoneclient@0.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/7971?format=json","purl":"pkg:pypi/python-keystoneclient@0.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/7972?format=json","purl":"pkg:pypi/python-keystoneclient@0.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/7973?format=json","purl":"pkg:pypi/python-keystoneclient@0.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/7974?format=json","purl":"pkg:pypi/python-keystoneclient@0.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/7975?format=json","purl":"pkg:pypi/python-keystoneclient@0.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/7976?format=json","purl":"pkg:pypi/python-keystoneclient@0.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/7977?format=json","purl":"pkg:pypi/python-keystoneclient@0.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7n2d-dh67-z7bv"},{"vulnerability":"VCID-e4fe-13v1-97e4"},{"vulnerability":"VCID-nkpc-cb73-47ez"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/python-keystoneclient@0.6.0"}],"references":[{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0382.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2014-0382.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2014-0409.html","reference_id":"","reference_type":"","scores":[],"url":"http://rhn.redhat.com/errata/RHSA-2014-0409.html"},{"reference_url":"https://bugs.launchpad.net/python-keystoneclient/+bug/1282865","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.launchpad.net/python-keystoneclient/+bug/1282865"},{"reference_url":"http://www.openwall.com/lists/oss-security/2014/03/27/4","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2014/03/27/4"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7n2d-dh67-z7bv"}