CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6563

An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the "consents" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.2%

CVSS Severity

CVSS v3 Score 7.7

References

Products affected by CVE-2023-6563

Redhat » Keycloak » Version: N/A

cpe:2.3:a:redhat:keycloak:-
Redhat » Keycloak » Version: 1.0

cpe:2.3:a:redhat:keycloak:1.0
Redhat » Keycloak » Version: 1.0.0

cpe:2.3:a:redhat:keycloak:1.0.0
Redhat » Keycloak » Version: 1.0.1

cpe:2.3:a:redhat:keycloak:1.0.1
Redhat » Keycloak » Version: 1.0.2

cpe:2.3:a:redhat:keycloak:1.0.2
Redhat » Keycloak » Version: 1.0.3

cpe:2.3:a:redhat:keycloak:1.0.3
Redhat » Keycloak » Version: 1.0.4

cpe:2.3:a:redhat:keycloak:1.0.4
Redhat » Keycloak » Version: 1.0.5

cpe:2.3:a:redhat:keycloak:1.0.5
Redhat » Keycloak » Version: 1.1.0

cpe:2.3:a:redhat:keycloak:1.1.0
Redhat » Keycloak » Version: 1.1.1

cpe:2.3:a:redhat:keycloak:1.1.1
Redhat » Keycloak » Version: 1.2.0

cpe:2.3:a:redhat:keycloak:1.2.0
Redhat » Keycloak » Version: 1.3.0

cpe:2.3:a:redhat:keycloak:1.3.0
Redhat » Keycloak » Version: 1.3.1

cpe:2.3:a:redhat:keycloak:1.3.1
Redhat » Keycloak » Version: 1.4.0

cpe:2.3:a:redhat:keycloak:1.4.0
Redhat » Keycloak » Version: 1.5.0

cpe:2.3:a:redhat:keycloak:1.5.0
Redhat » Keycloak » Version: 1.5.1

cpe:2.3:a:redhat:keycloak:1.5.1
Redhat » Keycloak » Version: 1.6.0

cpe:2.3:a:redhat:keycloak:1.6.0
Redhat » Keycloak » Version: 1.6.1

cpe:2.3:a:redhat:keycloak:1.6.1
Redhat » Keycloak » Version: 1.7.0

cpe:2.3:a:redhat:keycloak:1.7.0
Redhat » Keycloak » Version: 1.8.0

cpe:2.3:a:redhat:keycloak:1.8.0
Redhat » Keycloak » Version: 1.8.1

cpe:2.3:a:redhat:keycloak:1.8.1
Redhat » Keycloak » Version: 1.8.2

cpe:2.3:a:redhat:keycloak:1.8.2
Redhat » Keycloak » Version: 1.9.0

cpe:2.3:a:redhat:keycloak:1.9.0
Redhat » Keycloak » Version: 1.9.1

cpe:2.3:a:redhat:keycloak:1.9.1
Redhat » Keycloak » Version: 1.9.2

cpe:2.3:a:redhat:keycloak:1.9.2
Redhat » Keycloak » Version: 1.9.3

cpe:2.3:a:redhat:keycloak:1.9.3
Redhat » Keycloak » Version: 1.9.4

cpe:2.3:a:redhat:keycloak:1.9.4
Redhat » Keycloak » Version: 1.9.5

cpe:2.3:a:redhat:keycloak:1.9.5
Redhat » Keycloak » Version: 1.9.6

cpe:2.3:a:redhat:keycloak:1.9.6
Redhat » Keycloak » Version: 1.9.7

cpe:2.3:a:redhat:keycloak:1.9.7
Redhat » Keycloak » Version: 1.9.8

cpe:2.3:a:redhat:keycloak:1.9.8
Redhat » Keycloak » Version: 10.0.0

cpe:2.3:a:redhat:keycloak:10.0.0
Redhat » Keycloak » Version: 10.0.1

cpe:2.3:a:redhat:keycloak:10.0.1
Redhat » Keycloak » Version: 11.0.0

cpe:2.3:a:redhat:keycloak:11.0.0
Redhat » Keycloak » Version: 11.0.3

cpe:2.3:a:redhat:keycloak:11.0.3
Redhat » Keycloak » Version: 12.0.0

cpe:2.3:a:redhat:keycloak:12.0.0
Redhat » Keycloak » Version: 12.0.1

cpe:2.3:a:redhat:keycloak:12.0.1
Redhat » Keycloak » Version: 12.0.2

cpe:2.3:a:redhat:keycloak:12.0.2
Redhat » Keycloak » Version: 12.0.3

cpe:2.3:a:redhat:keycloak:12.0.3
Redhat » Keycloak » Version: 12.0.4

cpe:2.3:a:redhat:keycloak:12.0.4
Redhat » Keycloak » Version: 13.0.0

cpe:2.3:a:redhat:keycloak:13.0.0
Redhat » Keycloak » Version: 13.0.1

cpe:2.3:a:redhat:keycloak:13.0.1
Redhat » Keycloak » Version: 14.0.0

cpe:2.3:a:redhat:keycloak:14.0.0
Redhat » Keycloak » Version: 15.0.0

cpe:2.3:a:redhat:keycloak:15.0.0
Redhat » Keycloak » Version: 15.0.1

cpe:2.3:a:redhat:keycloak:15.0.1
Redhat » Keycloak » Version: 15.0.2

cpe:2.3:a:redhat:keycloak:15.0.2
Redhat » Keycloak » Version: 15.1.0

cpe:2.3:a:redhat:keycloak:15.1.0
Redhat » Keycloak » Version: 15.1.1

cpe:2.3:a:redhat:keycloak:15.1.1
Redhat » Keycloak » Version: 16.0.0

cpe:2.3:a:redhat:keycloak:16.0.0
Redhat » Keycloak » Version: 16.1.0

cpe:2.3:a:redhat:keycloak:16.1.0
Redhat » Keycloak » Version: 16.1.1

cpe:2.3:a:redhat:keycloak:16.1.1
Redhat » Keycloak » Version: 17.0.0

cpe:2.3:a:redhat:keycloak:17.0.0
Redhat » Keycloak » Version: 17.0.1

cpe:2.3:a:redhat:keycloak:17.0.1
Redhat » Keycloak » Version: 18.0.0

cpe:2.3:a:redhat:keycloak:18.0.0
Redhat » Keycloak » Version: 18.0.1

cpe:2.3:a:redhat:keycloak:18.0.1
Redhat » Keycloak » Version: 18.0.2

cpe:2.3:a:redhat:keycloak:18.0.2
Redhat » Keycloak » Version: 18.0.6

cpe:2.3:a:redhat:keycloak:18.0.6
Redhat » Keycloak » Version: 19.0.0

cpe:2.3:a:redhat:keycloak:19.0.0
Redhat » Keycloak » Version: 19.0.1

cpe:2.3:a:redhat:keycloak:19.0.1
Redhat » Keycloak » Version: 2.0.0

cpe:2.3:a:redhat:keycloak:2.0.0
Redhat » Keycloak » Version: 2.1.0

cpe:2.3:a:redhat:keycloak:2.1.0
Redhat » Keycloak » Version: 2.2.0

cpe:2.3:a:redhat:keycloak:2.2.0
Redhat » Keycloak » Version: 2.2.1

cpe:2.3:a:redhat:keycloak:2.2.1
Redhat » Keycloak » Version: 2.3.0

cpe:2.3:a:redhat:keycloak:2.3.0
Redhat » Keycloak » Version: 2.4.0

cpe:2.3:a:redhat:keycloak:2.4.0
Redhat » Keycloak » Version: 2.5.0

cpe:2.3:a:redhat:keycloak:2.5.0
Redhat » Keycloak » Version: 2.5.1

cpe:2.3:a:redhat:keycloak:2.5.1
Redhat » Keycloak » Version: 2.5.10

cpe:2.3:a:redhat:keycloak:2.5.10
Redhat » Keycloak » Version: 2.5.2

cpe:2.3:a:redhat:keycloak:2.5.2
Redhat » Keycloak » Version: 2.5.3

cpe:2.3:a:redhat:keycloak:2.5.3
Redhat » Keycloak » Version: 2.5.4

cpe:2.3:a:redhat:keycloak:2.5.4
Redhat » Keycloak » Version: 2.5.5

cpe:2.3:a:redhat:keycloak:2.5.5
Redhat » Keycloak » Version: 2.5.6

cpe:2.3:a:redhat:keycloak:2.5.6
Redhat » Keycloak » Version: 2.5.7

cpe:2.3:a:redhat:keycloak:2.5.7
Redhat » Keycloak » Version: 2.5.8

cpe:2.3:a:redhat:keycloak:2.5.8
Redhat » Keycloak » Version: 2.5.9

cpe:2.3:a:redhat:keycloak:2.5.9
Redhat » Keycloak » Version: 20.0.2

cpe:2.3:a:redhat:keycloak:20.0.2
Redhat » Keycloak » Version: 3.0.0

cpe:2.3:a:redhat:keycloak:3.0.0
Redhat » Keycloak » Version: 3.1.0

cpe:2.3:a:redhat:keycloak:3.1.0
Redhat » Keycloak » Version: 3.1.1

cpe:2.3:a:redhat:keycloak:3.1.1
Redhat » Keycloak » Version: 3.2.0

cpe:2.3:a:redhat:keycloak:3.2.0
Redhat » Keycloak » Version: 3.2.1

cpe:2.3:a:redhat:keycloak:3.2.1
Redhat » Keycloak » Version: 3.3.0

cpe:2.3:a:redhat:keycloak:3.3.0
Redhat » Keycloak » Version: 3.4.0

cpe:2.3:a:redhat:keycloak:3.4.0
Redhat » Keycloak » Version: 3.4.1

cpe:2.3:a:redhat:keycloak:3.4.1
Redhat » Keycloak » Version: 3.4.2

cpe:2.3:a:redhat:keycloak:3.4.2
Redhat » Keycloak » Version: 3.4.3

cpe:2.3:a:redhat:keycloak:3.4.3
Redhat » Keycloak » Version: 4.0.0

cpe:2.3:a:redhat:keycloak:4.0.0
Redhat » Keycloak » Version: 4.1.0

cpe:2.3:a:redhat:keycloak:4.1.0
Redhat » Keycloak » Version: 4.2.0

cpe:2.3:a:redhat:keycloak:4.2.0
Redhat » Keycloak » Version: 4.2.1

cpe:2.3:a:redhat:keycloak:4.2.1
Redhat » Keycloak » Version: 4.3.0

cpe:2.3:a:redhat:keycloak:4.3.0
Redhat » Keycloak » Version: 4.4.0

cpe:2.3:a:redhat:keycloak:4.4.0
Redhat » Keycloak » Version: 4.5.0

cpe:2.3:a:redhat:keycloak:4.5.0
Redhat » Keycloak » Version: 4.6.0

cpe:2.3:a:redhat:keycloak:4.6.0
Redhat » Keycloak » Version: 4.7.0

cpe:2.3:a:redhat:keycloak:4.7.0
Redhat » Keycloak » Version: 4.8.0

cpe:2.3:a:redhat:keycloak:4.8.0
Redhat » Keycloak » Version: 4.8.1

cpe:2.3:a:redhat:keycloak:4.8.1
Redhat » Keycloak » Version: 4.8.2

cpe:2.3:a:redhat:keycloak:4.8.2
Redhat » Keycloak » Version: 4.8.3

cpe:2.3:a:redhat:keycloak:4.8.3
Redhat » Keycloak » Version: 5.0.0

cpe:2.3:a:redhat:keycloak:5.0.0
Redhat » Keycloak » Version: 6.0.0

cpe:2.3:a:redhat:keycloak:6.0.0
Redhat » Keycloak » Version: 6.0.1

cpe:2.3:a:redhat:keycloak:6.0.1
Redhat » Keycloak » Version: 6.0.2

cpe:2.3:a:redhat:keycloak:6.0.2
Redhat » Keycloak » Version: 7.0.0

cpe:2.3:a:redhat:keycloak:7.0.0
Redhat » Keycloak » Version: 7.0.1

cpe:2.3:a:redhat:keycloak:7.0.1
Redhat » Keycloak » Version: 8.0.0

cpe:2.3:a:redhat:keycloak:8.0.0
Redhat » Keycloak » Version: 8.0.2

cpe:2.3:a:redhat:keycloak:8.0.2
Redhat » Keycloak » Version: 9.0.0

cpe:2.3:a:redhat:keycloak:9.0.0
Redhat » Keycloak » Version: 9.0.1

cpe:2.3:a:redhat:keycloak:9.0.1
Redhat » Keycloak » Version: 9.0.13

cpe:2.3:a:redhat:keycloak:9.0.13
Redhat » Keycloak » Version: 9.0.2

cpe:2.3:a:redhat:keycloak:9.0.2
Redhat » Openshift Container Platform » Version: 4.11

cpe:2.3:a:redhat:openshift_container_platform:4.11
Redhat » Openshift Container Platform » Version: 4.12

cpe:2.3:a:redhat:openshift_container_platform:4.12
Redhat » Openshift Container Platform For Ibm Linuxone » Version: 4.10

cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.10
Redhat » Openshift Container Platform For Ibm Linuxone » Version: 4.9

cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.9
Redhat » Openshift Container Platform For Power » Version: 4.10

cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10
Redhat » Openshift Container Platform For Power » Version: 4.9

cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9
Redhat » Single Sign-On » Version: N/A

cpe:2.3:a:redhat:single_sign-on:-
Redhat » Single Sign-On » Version: 7.6

cpe:2.3:a:redhat:single_sign-on:7.6
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux » Version: 9.0

cpe:2.3:o:redhat:enterprise_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6563

Products

Pricing

Contact Us