CVE-2014-7960

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
VendorProductVersion
openstackswift
𝑥
≤ 2.1.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
swift
bullseye (security)
2.26.0-10+deb11u1
fixed
bullseye
2.26.0-10+deb11u1
fixed
wheezy
no-dsa
bookworm
2.30.0-4
fixed
sid
2.34.0-4
fixed
trixie
2.34.0-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
swift
vivid
Fixed 2.2.2-0ubuntu1
released
utopic
Fixed 2.2.0-0ubuntu1
released
trusty
Fixed 1.13.1-0ubuntu1.2
released
precise
Fixed 1.4.8-0ubuntu2.5
released
lucid
dne
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html
http://rhn.redhat.com/errata/RHSA-2015-0835.html
http://rhn.redhat.com/errata/RHSA-2015-0836.html
http://rhn.redhat.com/errata/RHSA-2015-1495.html
http://www.openwall.com/lists/oss-security/2014/10/07/39
http://www.openwall.com/lists/oss-security/2014/10/08/7
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.securityfocus.com/bid/70279
http://www.ubuntu.com/usn/USN-2704-1
https://bugs.launchpad.net/swift/+bug/1365350
https://exchange.xforce.ibmcloud.com/vulnerabilities/96901
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html
http://rhn.redhat.com/errata/RHSA-2015-0835.html
http://rhn.redhat.com/errata/RHSA-2015-0836.html
http://rhn.redhat.com/errata/RHSA-2015-1495.html
http://www.openwall.com/lists/oss-security/2014/10/07/39
http://www.openwall.com/lists/oss-security/2014/10/08/7
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.securityfocus.com/bid/70279
http://www.ubuntu.com/usn/USN-2704-1
https://bugs.launchpad.net/swift/+bug/1365350
https://exchange.xforce.ibmcloud.com/vulnerabilities/96901