How many CVEs have a located fix in openstack/keystone?

29 published CVEs have a fix traced to functions in openstack/keystone, touching 64 functions across 30 files.

Which function in openstack/keystone has been patched by the most CVEs?

authenticate in keystone/service.py has been changed by 3 CVE fixes, from 2012 to 2013.

How large is a typical CVE fix in openstack/keystone?

The median fix changes 25 lines. 45% of fixes change 20 lines or fewer, and 38% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

#163 of 500 repositories

openstack/keystone

Name: openstack/keystone: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix August 6, 2021

29

CVE fixes located

Published CVEs

64

Functions patched

Distinct function sites

30

Files patched

Distinct source files

2012–2021

Years covered

By CVE publication date

Overview

29 published CVEs have a fix traced to functions in openstack/keystone, the earliest published in 2012. Those fixes changed 64 distinct functions across 30 files, in 212 patch hunks.

Among the 500 repositories tracked here, openstack/keystone ranks #163 by the number of CVEs with a located fix.

Most patched functions

Functions in openstack/keystone changed by the most CVE fixes.

Most patched files

Files in openstack/keystone changed by the most CVE fixes.

1keystone/identity/core.py5 CVEs · 10 functions
2keystone/service.py5 CVEs · 4 functions
3keystone/token/core.py3 CVEs · 4 functions
4keystone/api/credentials.py3 CVEs · 3 functions
5keystone/common/utils.py3 CVEs · 2 functions
6keystone/contrib/ec2/core.py2 CVEs · 4 functions
7keystone/contrib/revoke/model.py2 CVEs · 4 functions
8keystone/assignment/backends/ldap.py2 CVEs · 3 functions
9keystone/api/users.py2 CVEs · 2 functions
10keystone/catalog/core.py2 CVEs · 2 functions

Fix size

How much code a CVE fix in openstack/keystone changes, with backports counted once.

25

Median lines changed

Added plus removed, per CVE

45%

Fixes of 20 lines or fewer

Share of CVE fixes

38%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in openstack/keystone, and the functions each fix changed.

OpenStack Keystone allows information disclosure during account locking
CVE-2021-38155wrapper
High · CVSS 7.5
EPSS 2.5%2021-08-06
OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context
CVE-2020-12689handle_authenticate _assign_unique_id _validate_blob_update_keys
High · CVSS 8.7
EPSS 1.6%2020-05-06
OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID
CVE-2020-12691handle_authenticate _assign_unique_id _validate_blob_update_keys
High · CVSS 8.7
EPSS 4.9%2020-05-06
OpenStack Keystone Credential Leakage
CVE-2019-19687_list_credentials
High · CVSS 8.7
EPSS 1.8%2019-12-09
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
CVE-2013-2255__call__
Medium · CVSS 5.9
EPSS 1.0%2019-11-01
OpenStack Identity service (keystone) Incorrect Authorization
CVE-2017-2673get_roles_for_groups
High · CVSS 8.6
EPSS 2.1%2018-07-19
OpenStack Identity Keystone Improper Access Control
CVE-2016-4911_extract_v2_token_data _authenticate_token
Medium · CVSS 5.3
EPSS 1.4%2016-06-13
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
CVE-2015-7546list_revoked_tokens _add_to_revocation_list
High · CVSS 8.6
EPSS 2.0%2016-02-03
OpenStack Identity Keystone Improper Privilege Management
CVE-2014-0204prep_case_insensitive _calc_assignment_type _get_roles_for_just_user_and_project
Medium · CVSS 6.5
EPSS 1.4%2014-11-03
OpenStack Identity Keystone Exposure of Sensitive Information
CVE-2014-3621WhiteListedItemFilter format_url
Medium · CVSS 4.0
EPSS 2.1%2014-10-02
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
CVE-2014-5251build_token_values build_token_values_v2 __init__
High · CVSS 7.1
EPSS 1.6%2014-08-25
OpenStack Keystone Domain-scoped tokens don't get revoked
CVE-2014-5253build_token_values
High · CVSS 7.1
EPSS 1.5%2014-08-25

Get an alert for each new openstack/keystone CVE, with the patched functions and AI-written analysis.

Monitor keystone CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

android.googlesource.com/platform-frameworks-native29 CVEs ash-project/ash29 CVEs debian/cacti29 CVEs electron/electron29 CVEs matrix-org/synapse29 CVEs MervinPraison/PraisonAI29 CVEs mybb/mybb29 CVEs payloadcms/payload29 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in openstack/keystone.

How many CVEs have a located fix in openstack/keystone?: 29 published CVEs have a fix traced to functions in openstack/keystone, touching 64 functions across 30 files.
Which function in openstack/keystone has been patched by the most CVEs?: authenticate in keystone/service.py has been changed by 3 CVE fixes, from 2012 to 2013.
How large is a typical CVE fix in openstack/keystone?: The median fix changes 25 lines. 45% of fixes change 20 lines or fewer, and 38% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track openstack/keystone CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing