Description
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html ↗
- http://www.openwall.com/lists/oss-security/2014/10/08/7 ↗
- https://bugs.launchpad.net/swift/+bug/1365350 ↗
- http://rhn.redhat.com/errata/RHSA-2015-1495.html ↗
- http://rhn.redhat.com/errata/RHSA-2015-0835.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96901 ↗
- http://www.openwall.com/lists/oss-security/2014/10/07/39 ↗
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html ↗
- http://www.ubuntu.com/usn/USN-2704-1 ↗
- http://www.securityfocus.com/bid/70279 ↗
- http://rhn.redhat.com/errata/RHSA-2015-0836.html ↗