VulertSecurity VulertSecurity

Vulnerability Database · Debian · keystone · Version

keystone 2:28.0.0-2

2:28.0.0-2 is affected by 73 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 2 Medium 1 Low 0 Unrated 70

All keystone versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

keystone 2:28.0.0-2 vulnerabilities

73 vulnerabilities cover keystone 2:28.0.0-2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
OpenStack Keystone Vulnerability: Stack Exhaustion from Long Passwords 7.5 high 2012.1~rc2-1 12 Nov 2019
OpenStack Keystone Application Secret Verification Bypass Vulnerability 7.4 high No fix published 26 Aug 2022
OpenStack Keystone SSL Certificate Validation Vulnerability 5.9 medium 2014.1-1 01 Nov 2019
OpenStack Keystone Vulnerability: Role Assignment Exposure in Multiple Debian Releases N/A unrated No fix published 27 Aug 2026
OpenStack Keystone Vulnerability: Token Mismanagement in OAuth1 Authentication N/A unrated No fix published 26 Aug 2026
OpenStack Keystone Token Scope Bypass Vulnerability N/A unrated No fix published 26 Aug 2026
Critical Vulnerability in Keystone Package: CVE-2026-43000 N/A unrated No fix published 28 May 2026
Critical Vulnerability in Keystone Package: CVE-2026-42999 N/A unrated No fix published 28 May 2026
Critical Vulnerability in Keystone Package: CVE-2026-42998 N/A unrated No fix published 28 May 2026
Critical Vulnerability in Keystone Package: CVE-2026-44394 N/A unrated No fix published 28 May 2026
Critical Vulnerability in Keystone Package: CVE-2026-43001 N/A unrated No fix published 01 May 2026
OpenStack Keystone LDAP User Authentication Vulnerability - CVE-2026-40683 N/A unrated No fix published 15 Apr 2026
Critical Vulnerability in Keystone Package: CVE-2026-33551 N/A unrated No fix published 08 Apr 2026
OpenStack Keystone Vulnerability: Stack Exhaustion via Long Passwords N/A unrated 2012.1~rc2-1 12 Nov 2019
SSL Certificate Validation Failure in Keystone Package N/A unrated 2014.1-1 01 Nov 2019
Sensitive Information Exposure in Keystone Logging N/A unrated 2015.1.0-1 12 May 2015
Sensitive Information Exposure in Keystone Package N/A unrated 2015.1.0-1 12 May 2015
Privilege Escalation Vulnerability in OpenStack Keystone N/A unrated 2014.1-5 03 Nov 2014
Privilege Escalation Vulnerability in Keystone Package N/A unrated 2014.1-5 03 Nov 2014
Unauthorized Project Access in Keystone - CVE-2014-3520 N/A unrated 2014.1.1-3 26 Oct 2014
Unauthorized Project Access in Keystone - OpenStack Identity Vulnerability N/A unrated 2014.1.1-3 26 Oct 2014
Sensitive Configuration Exposure in Keystone Package - CVE-2014-3621 N/A unrated 2014.1.3-1 02 Oct 2014
OpenStack Keystone Remote Configuration Exposure Vulnerability N/A unrated 2014.1.3-1 02 Oct 2014
Token Revocation Flaw in Keystone Package - OpenStack Identity Vulnerability N/A unrated 2014.1.2.1-1 25 Aug 2014
Token Expiration Bypass in Keystone - CVE-2014-5252 N/A unrated 2014.1.2.1-1 25 Aug 2014
OpenStack Keystone Token Revocation Vulnerability - CVE-2014-5253 N/A unrated 2014.1.2.1-1 25 Aug 2014
Keystone MySQL Token Driver Vulnerability - Token Expiration Flaw N/A unrated 2014.1.2.1-1 25 Aug 2014
Critical Vulnerability in Keystone Package: Token Expiration Bypass N/A unrated 2014.1.2.1-1 25 Aug 2014
Token Expiration Flaw in OpenStack Keystone - CVE-2014-5251 N/A unrated 2014.1.2.1-1 25 Aug 2014
Privilege Escalation Vulnerability in OpenStack Keystone N/A unrated 2014.1.1-2 17 Jun 2014
Privilege Escalation Vulnerability in Keystone Package N/A unrated 2014.1.1-2 17 Jun 2014
Denial of Service Vulnerability in Keystone Package N/A unrated 2013.1.1-2 02 Jun 2014
Denial of Service Vulnerability in Keystone - CVE-2013-2014 N/A unrated 2013.1.1-2 02 Jun 2014
Denial of Service Vulnerability in OpenStack Keystone API N/A unrated 2014.1-1 15 Apr 2014
Denial of Service Vulnerability in Keystone Package - OpenStack Identity API N/A unrated 2014.1-1 15 Apr 2014
Privilege Escalation Vulnerability in Keystone and Python Keystone Client N/A unrated 2013.1.1-2 15 Apr 2014
Vulnerability in python-keystoneclient package (CVE-2014-0105) N/A unrated 2013.1.1-2 15 Apr 2014
OpenStack Keystone Vulnerability: Token Revocation Bypass N/A unrated 2013.2.3-1 01 Apr 2014
Token Revocation Bypass in Keystone: CVE-2014-2237 Vulnerability N/A unrated 2013.2.3-1 01 Apr 2014
Privilege Escalation Vulnerability in Keystone - CVE-2013-6391 N/A unrated 2013.2.1-1 14 Dec 2013
Privilege Escalation Vulnerability in Keystone Package N/A unrated 2013.2.1-1 14 Dec 2013
Privilege Escalation Vulnerability in Keystone LDAP Backend N/A unrated 2013.2-2 02 Nov 2013
Privilege Escalation Vulnerability in Keystone Package N/A unrated 2013.2-2 02 Nov 2013
Token Revocation Flaw in Keystone Package: CVE-2013-4222 N/A unrated 2013.1.3-1 30 Sep 2013
Token Revocation Flaw in Keystone Package Allows Unauthorized Access N/A unrated 2013.1.3-1 30 Sep 2013
PKI Token Revocation Bypass in Keystone - CVE-2013-4294 N/A unrated 2013.1.3-2 23 Sep 2013
Critical Vulnerability in Keystone Package: PKI Token Revocation Bypass N/A unrated 2013.1.3-2 23 Sep 2013
OpenStack Keystone LDAP Authentication Bypass Vulnerability N/A unrated 2013.1.2-1 20 Aug 2013
Authentication Bypass Vulnerability in Keystone Package N/A unrated 2013.1.2-1 20 Aug 2013
Critical Authentication Token Vulnerability in Keystone Package N/A unrated 2013.1.1-2 21 May 2013
Sensitive Information Exposure in Keystone Logging - CVE-2013-2006 N/A unrated 2013.1.1-2 21 May 2013
Sensitive Information Exposure in Keystone Package Due to DEBUG Logging N/A unrated 2013.1.1-2 21 May 2013
OpenStack Keystone Token Revocation Vulnerability - CVE-2013-2059 N/A unrated 2013.1.1-2 21 May 2013
Access Bypass Vulnerability in Keystone Package: CVE-2013-0282 N/A unrated 2012.1.1-13 12 Apr 2013
Denial of Service Vulnerability in Keystone Package - CVE-2013-0270 N/A unrated 2013.1.1-2 12 Apr 2013
OpenStack Keystone EC2 Authentication Bypass Vulnerability N/A unrated 2012.1.1-13 12 Apr 2013
Denial of Service Vulnerability in Keystone Package - CVE-2013-0270 N/A unrated 2013.1.1-2 12 Apr 2013
XML External Entity Vulnerability in Keystone and Python-Django Packages N/A unrated 2012.1.1-13 03 Apr 2013
XML External Entity (XXE) Vulnerability in Keystone and Django Packages N/A unrated 2012.1.1-13 03 Apr 2013
Denial of Service Vulnerability in Keystone Package N/A unrated 2012.1.1-12 24 Feb 2013
Denial of Service Vulnerability in Keystone Package - CVE-2013-0247 N/A unrated 2012.1.1-12 24 Feb 2013
Authorization Bypass Vulnerability in Keystone Package N/A unrated 2012.1.1-11 18 Dec 2012
Authorization Bypass in Keystone Package Due to EC2 Token Mismanagement N/A unrated 2012.1.1-11 18 Dec 2012
Critical Vulnerability in Keystone Package: Improper X-Auth-Token Validation N/A unrated 2012.1.1-9 09 Oct 2012
Authorization Token Mismanagement in Keystone Package Leads to Resource Access Vulnerability N/A unrated 2012.1.1-9 09 Oct 2012
Authorization Token Mismanagement in Keystone - CVE-2012-4457 N/A unrated 2012.1.1-9 09 Oct 2012
OpenStack Keystone Vulnerability: Improper X-Auth-Token Validation N/A unrated 2012.1.1-9 09 Oct 2012
Token Retention Vulnerability in OpenStack Keystone: CVE-2012-4413 N/A unrated 2012.1.1-6 18 Sep 2012
Token Retention Vulnerability in Keystone Package N/A unrated 2012.1.1-6 18 Sep 2012
Arbitrary User Addition Vulnerability in Keystone Package N/A unrated 2012.1.1-5 05 Sep 2012
Arbitrary User Addition Vulnerability in Keystone Package N/A unrated 2012.1.1-5 05 Sep 2012
Token Expiration Bypass in Keystone Package - CVE-2012-3426 N/A unrated 2012.1.1-1 31 Jul 2012
Token Expiration Bypass in OpenStack Keystone - CVE-2012-3426 N/A unrated 2012.1.1-1 31 Jul 2012

Looking for another version, or everything Vulert holds for keystone?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About keystone 2:28.0.0-2

Is keystone 2:28.0.0-2 vulnerable?

Yes. 73 vulnerabilities in the Vulert database cover keystone 2:28.0.0-2: 0 critical, 2 high, 1 medium and 0 low, plus 70 not yet rated. Each entry above names the fixed version to move to.

How do I monitor keystone for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the keystone version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.