GitHub Advisoryadvisory · PyPI

GHSA-wxx2-gqvv-34hx OpenStack Swift allows authenticated users to cause a denial of service

MEDIUM Published 2022-05-17 Modified 2024-05-14 Official page ↗
Aliases
CVE-2013-4155
Ecosystem
PyPI
Packages
swift
Severity
Moderate
Weaknesses
CWE-119
Reviewed
2024-05-14

Affected packages

• PyPI swift: < 1.9.1 → fixed in 1.9.1

Description

OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.

Related

Alias · CVE (1)

  • CVE-2013-4155 OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous"… vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References