Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters
A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect (OIDC) token endpoint. This leads to high resource consumption and prolonged processing times, ultimately resulting in a Denial of Service (DoS) for the Keycloak server.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat build of Keycloak 26.2
Vendor
Red Hat
Product
Red Hat build of Keycloak 26.2
Platforms
Unknown
Default status
affected
Package
rhbk/keycloak-operator-bundle
Package collection
https://catalog.redhat.com/software/containers/
Red Hat build of Keycloak 26.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
26.2.15-1
unaffected
rpm
*
Unavailable
None listed
Red Hat build of Keycloak 26.2
Vendor
Red Hat
Product
Red Hat build of Keycloak 26.2
Platforms
Unknown
Default status
affected
Package
rhbk/keycloak-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat build of Keycloak 26.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
26.2-18
unaffected
rpm
*
Unavailable
None listed
Red Hat build of Keycloak 26.2
Vendor
Red Hat
Product
Red Hat build of Keycloak 26.2
Platforms
Unknown
Default status
affected
Package
rhbk/keycloak-rhel9-operator
Package collection
https://catalog.redhat.com/software/containers/
Red Hat build of Keycloak 26.2 · Scoped product and version facts