Every CVE Search/ Get API key

CVE-2012-4406

OpenStack Object Storage (swift) Code Injection vulnerability

9.8 CriticalFix available

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

6.57%Down 4.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
CVE-2012-4406
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-502
Updated
2026-11-02
CVE List No score

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
CVE-2012-4406
Updated
2026-11-02
EUVDEUVD-2022-5311 No score

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
EUVD-2022-5311
Updated
2026-11-03
GitHub AdvisoriesGHSA-v7mh-3jgf-r26c 9.8

OpenStack Object Storage (swift) Code Injection vulnerability

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
GHSA-v7mh-3jgf-r26c
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94, CWE-502
Updated
2026-11-02
OSV 9.8

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
CVE-2012-4406
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2012-4406 9.8

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
DEBIAN-CVE-2012-4406
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-v7mh-3jgf-r26c 9.8

OpenStack Object Storage (swift) Code Injection vulnerability

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
GHSA-v7mh-3jgf-r26c
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-502, CWE-94
Updated
2026-11-02
OSVPYSEC-2026-545 9.8

OpenStack Object Storage (swift) Code Injection vulnerability

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Record
PYSEC-2026-545
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
swift
PyPI
 before 1.7.0
1.7.0
swift
Debian:12
 before 1.4.8-2
1.4.8-2
swift
Debian:13
 before 1.4.8-2
1.4.8-2
swift
Debian:14
 before 1.4.8-2
1.4.8-2
swift
PyPI
 before 1.7.0, plus listed versions
1.0.2
1.7.0
openstack-swift
Red Hat:openstack:1::el6
 before 0:1.4.8-5.el6
0:1.4.8-5.el6
openstack-swift-account
Red Hat:openstack:1::el6
 before 0:1.4.8-5.el6
0:1.4.8-5.el6
openstack-swift-container
Red Hat:openstack:1::el6
 before 0:1.4.8-5.el6
0:1.4.8-5.el6
openstack-swift-doc
Red Hat:openstack:1::el6
 before 0:1.4.8-5.el6
0:1.4.8-5.el6
openstack-swift-object
Red Hat:openstack:1::el6
 before 0:1.4.8-5.el6
0:1.4.8-5.el6
Show 70 moreShow less
Affected packages
PackageAffectedFixed
openstack-swift-proxy
Red Hat:openstack:1::el6
 before 0:1.4.8-5.el6
0:1.4.8-5.el6
glusterfs
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-debuginfo
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-devel
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-fuse
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-rdma
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
appliance
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
appliance-base
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
augeas
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-libs
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
gluster-swift
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-account
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-container
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-doc
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-object
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-proxy
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
glusterfs
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-fuse
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-geo-replication
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-rdma
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-server
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
libvirt
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-client
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-lock-sanlock
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
rhn-check
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-client-tools
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup-gnome
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
sanlock
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-lib
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sos
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.2-17.2.el6rhs
0:2.2-17.2.el6rhs
vdsm
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-cli
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debug-plugin
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-gluster
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-faqemu
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-vhostmd
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-reg
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
rhsc
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-backend
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-config
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-dbscripts
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-genericapi
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-jboss-deps
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-notification-service
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-restapi
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-setup
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-tools-common
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-userportal
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-webadmin-portal
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
vdsm
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
glusterfs
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-debuginfo
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-devel
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-fuse
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-rdma
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4406 is a critical vulnerability (CVSS 9.8) in Openstack Swift, published October 22, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.57%, the 93rd percentile. Fixed in swift 1.7.0.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open