CVEvulnerability
CVE-2013-4155
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
Affected configurations
• openstack folsom
• openstack grizzly
• openstack havana
• openstack swift (<= 1.9.0)
• openstack swift 1.0.0
• openstack swift 1.0.1
• openstack swift 1.0.2
• openstack swift 1.1.0
• openstack swift 1.2.0
• openstack swift 1.3.0
• openstack swift 1.4.0
• openstack swift 1.4.1
• openstack swift 1.4.2
• openstack swift 1.4.3
• openstack swift 1.4.4
• openstack swift 1.4.5
• openstack swift 1.4.6
• openstack swift 1.4.7
• openstack swift 1.4.8
• openstack swift 1.5.0
• openstack swift 1.6.0
• openstack swift 1.7.0
• openstack swift 1.7.2
• openstack swift 1.7.4
• openstack swift 1.7.5
• openstack swift 1.7.6
• openstack swift 1.8.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://rhn.redhat.com/errata/RHSA-2013-1197.html rhn.redhat.com
- http://www.debian.org/security/2012/dsa-2737 www.debian.org
- http://www.openwall.com/lists/oss-security/2013/08/07/6 www.openwall.com
- http://www.ubuntu.com/usn/USN-2001-1 www.ubuntu.com
- https://bugs.launchpad.net/swift/+bug/1196932 bugs.launchpad.net
- https://review.openstack.org/#/c/40643/ review.openstack.org
- https://review.openstack.org/#/c/40645/ review.openstack.org
- https://review.openstack.org/#/c/40646/ review.openstack.org
- http://rhn.redhat.com/errata/RHSA-2013-1197.html rhn.redhat.com
- http://www.debian.org/security/2012/dsa-2737 www.debian.org
- http://www.openwall.com/lists/oss-security/2013/08/07/6 www.openwall.com
- http://www.ubuntu.com/usn/USN-2001-1 www.ubuntu.com
- https://bugs.launchpad.net/swift/+bug/1196932 bugs.launchpad.net
- https://review.openstack.org/#/c/40643/ review.openstack.org
- https://review.openstack.org/#/c/40645/ review.openstack.org
- https://review.openstack.org/#/c/40646/ review.openstack.org