PT-2014-8345 · Openstack+1 · Openstack Object Storage+1

Rajaneesh Singh + 1 · Publicado 2014-10-17 · Atualizado 2022-05-17 · CVE-2014-7960

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Object Storage (Swift) versions prior to 2.2.0

Description The issue allows remote authenticated users to bypass certain metadata constraints, such as max meta count, by sending multiple crafted requests that exceed the limit when combined.

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-7960

GHSA-G6X3-55QV-X6P2

RHSA-2015:0835

RHSA-2015:0836

RHSA-2015:1495

SUSE-SU-2015:1846-1

USN-2704-1

Produtos afetados

Openstack Object Storage

Ubuntu

Referências · 39

• https://github.com/openstack/swift/commit/06800cbe446ce4c937a57b69517b55c3bba9b6e1 · Nota
• https://github.com/openstack/swift/commit/5b2c27a5874c2b5b0a333e4955b03544f6a8119f · Nota
• https://github.com/openstack/swift/commit/2c4622a28ea04e1c6b2382189b0a1f6cccdc9c0f · Nota
• https://github.com/openstack/swift · Nota
• https://bugzilla.suse.com/942641 · Nota
• http://ubuntu.com/usn/USN-2704-1 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2015-0836.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1856 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2015-0836.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2015-0835.html · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html · Nota
• http://openwall.com/lists/oss-security/2014/10/08/7 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-7960 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-7960 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1495.html · Aviso do Fabricante