CVE-2012-4406 OpenStack Object Storage (swift) Code Injection vulnerability
CriticalCVSS 9.8
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi swift(PyPI) | < 1.7.0 | 1.7.0 |
| pypi swift(PyPI) | = 1.0.2 | No fix listed |
| debian/swift(Debian:12) | < 1.4.8-2 | 1.4.8-2 |
| debian/swift(Debian:13) | < 1.4.8-2 | 1.4.8-2 |
| debian/swift(Debian:14) | < 1.4.8-2 | 1.4.8-2 |
| OpenStack Swift | < 1.7.0 | 1.7.0 |
| fedoraproject fedora | = 16 | No fix listed |
| redhat gluster storage management console | = 2.0 | No fix listed |
| redhat gluster storage server for on-premise | = 2.0 | No fix listed |
| redhat storage | = 2.0 | No fix listed |
| redhat storage for public cloud | = 2.0 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugs.launchpad.net issue-tracking patch
- bugzilla.redhat.com issue-tracking patch
- openstack-swift-loads-code-exec(79140) third-party-advisory vdb-entry
- launchpad.net release-notes
- opendev.org product
- web.archive.org
- FEDORA-2012-15098 mailing-list vendor-advisory
- RHSA-2012:1379 third-party-advisory vendor-advisory
- RHSA-2013:0691 not-applicable vendor-advisory
- [oss-security] 20120905 Re: CVE-Request: openstack pickle de-serialization mailing-list
- [oss-security] 20120905 CVE-Request: openstack pickle de-serialization mailing-list
- 55420 broken-link vdb-entry
- pypi.org product
- github.com vendor-advisory
- Debian Security Tracker CVE-2012-4406 vendor-advisory
- bugs.debian.org issue-tracking