CVE-2014-8177 The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted....
MediumCVSS 6.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat gluster storage management console | = 3.1 | No fix listed |
| redhat gluster storage server | = 3.1 | No fix listed |
| redhat storage native client | All versions | No fix listed |
References
- RHSA-2015:1845 vendor-advisory
- RHSA-2015:1846 vendor-advisory
- [oss-security] 20150827 CVE-2014-8177 gluster-swift metadata constraints are not correctly enforced mailing-list
- bugzilla.redhat.com