PT-2012-5379 · Memcached+2 · Memcached+2

Krahmer + 1 · Publicado 2012-10-22 · Atualizado 2024-01-25 · CVE-2012-4406

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Object Storage (swift) versions prior to 1.7.0

Description The issue allows remote attackers to execute arbitrary code via a crafted pickle object. This is due to the unsafe use of the loads function in the pickle Python module when storing and loading metadata in memcached.

Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the memcached metadata storage to minimize the risk of exploitation.

Correção

RCE

Deserialization of Untrusted Data

Code Injection

Enumeração de Fraquezas

CWE-502

CWE-94

Identificadores relacionados

CVE-2012-4406

GHSA-V7MH-3JGF-R26C

RHSA-2012:1379

RHSA-2013:0691

Produtos afetados

Openstack Object Storage

Memcached

Pickle

Referências · 22

• https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a · Correção
• http://rhn.redhat.com/errata/RHSA-2012-1379.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79140 · Nota
• http://rhn.redhat.com/errata/RHSA-2013-0691.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4406 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html · Aviso do Fabricante
• http://securityfocus.com/bid/55420 · Nota
• https://access.redhat.com/security/cve/CVE-2012-4406 · Nota
• https://osv.dev/vulnerability/GHSA-v7mh-3jgf-r26c · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/09/05/4 · Nota
• https://t.me/cvenotify/68620 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/CVE-2012-4406 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=854757 · Correção
• https://launchpad.net/swift/+milestone/1.7.0 · Nota
• https://web.archive.org/web/20130629092623/http://securityfocus.com/bid/55420 · Nota