Published: 22/10/2012 Updated: 25/01/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

OpenStack Object Storage (swift) prior to 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote malicious users to execute arbitrary code via a crafted pickle object.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openstack swift
fedoraproject fedora 16
redhat enterprise linux server 5.0
redhat enterprise linux server 6.0
redhat storage 2.0
redhat storage for public cloud 2.0
redhat gluster storage server for on-premise 2.0
redhat gluster storage management console 2.0

Debian Bug report logs - #686812 swift: CVE-2012-4406 Package: swift; Maintainer for swift is Debian OpenStack <team+openstack@trackerdebianorg>; Source for swift is src:swift (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 6 Sep 2012 07:15:02 UTC Severity: grave Tags: security ...

Multiple security issues were fixed in OpenStack Swift ...

Synopsis Important: openstack-swift security update Type/Severity Security Advisory: Important Topic Updated openstack-swift packages that fix one security issue are nowavailable for Red Hat OpenStack EssexThe Red Hat Security Response Team has rated this update as havingimportant security impact A Common ...

Synopsis Important: Red Hat Storage 20 security, bug fix, and enhancement update #4 Type/Severity Security Advisory: Important Topic Updated Red Hat Storage 20 packages that fix multiple security issues,several bugs, and add enhancements are now availableThe Red Hat Security Response Team has rated this ...

CWE-502 https://bugzilla.redhat.com/show_bug.cgi?id=854757 http://www.openwall.com/lists/oss-security/2012/09/05/16 http://rhn.redhat.com/errata/RHSA-2012-1379.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html https://launchpad.net/swift/+milestone/1.7.0 https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a https://bugs.launchpad.net/swift/+bug/1006414 http://www.openwall.com/lists/oss-security/2012/09/05/4 http://www.securityfocus.com/bid/55420 http://rhn.redhat.com/errata/RHSA-2013-0691.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79140 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686812 https://usn.ubuntu.com/1887-1/https://nvd.nist.gov

CVE-2012-4406

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect