CVE-2014-7960
OpenStack Swift metadata constraints are not correctly enforced
4.0 MediumFix available
CVE-2014-7960 is a medium vulnerability (CVSS 4.0) in Openstack Swift, published October 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 88th percentile. Fixed in swift 2.2.0.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.13%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.2.0swift +194 more
Description
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
Exploit likelihood
3.13%Up 1.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
swiftPyPI | before 2.2.0 | 2.2.0 |
swiftDebian:12 | before 2.2.0-1 | 2.2.0-1 |
swiftDebian:13 | before 2.2.0-1 | 2.2.0-1 |
swiftDebian:14 | before 2.2.0-1 | 2.2.0-1 |
swiftPyPI | before 2.2.0, plus listed versions 1.0.2 | 2.2.0 |
openstack-swiftRed Hat:openstack:5::el7 | before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-accountRed Hat:openstack:5::el7 | before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-containerRed Hat:openstack:5::el7 | before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-docRed Hat:openstack:5::el7 | before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-objectRed Hat:openstack:5::el7 | before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
Show 185 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-swift-proxyRed Hat:openstack:5::el7 | before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swiftRed Hat:openstack:5::el6 | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-accountRed Hat:openstack:5::el6 | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-containerRed Hat:openstack:5::el6 | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-docRed Hat:openstack:5::el6 | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-objectRed Hat:openstack:5::el6 | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-proxyRed Hat:openstack:5::el6 | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
glusterfsRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-apiRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-api-develRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-cliRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-client-xlatorsRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-debuginfoRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-develRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-fuseRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-libsRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-rdmaRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
python-glusterRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs | before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
nfs-ganeshaRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs | before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
nfs-ganesha-debuginfoRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs | before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
nfs-ganesha-glusterRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs | before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
nfs-ganesha-nullfsRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs | before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
check-mkRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.2.6p1-3.el6rhs | 0:1.2.6p1-3.el6rhs |
check-mk-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.2.6p1-3.el6rhs | 0:1.2.6p1-3.el6rhs |
check-mk-livestatusRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.2.6p1-3.el6rhs | 0:1.2.6p1-3.el6rhs |
gluster-nagios-commonRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:0.2.0-1.el6rhs | 0:0.2.0-1.el6rhs |
nagios-pluginsRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-dummyRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-nrpeRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
nagios-plugins-pingRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-server-addonsRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:0.2.1-4.el6rhs | 0:0.2.1-4.el6rhs |
nrpeRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
nrpe-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
pnp4nagiosRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:0.6.22-2.1.el6rhs | 0:0.6.22-2.1.el6rhs |
pnp4nagios-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:0.6.22-2.1.el6rhs | 0:0.6.22-2.1.el6rhs |
pynagRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:0.9.1-1.el6rhs | 0:0.9.1-1.el6rhs |
pynag-examplesRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:0.9.1-1.el6rhs | 0:0.9.1-1.el6rhs |
python-cpopenRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
python-cpopen-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs | before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
libtallocRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs | before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
libtalloc-debuginfoRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs | before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
libtalloc-develRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs | before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
pytallocRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs | before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
pytalloc-develRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs | before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
augeasRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
augeas-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
augeas-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
augeas-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
ccsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-81.el6 | 0:0.16.2-81.el6 |
clufterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-lib-ccsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-lib-generalRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-lib-pcsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
cluster-cimRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
cluster-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
cluster-snmpRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
clusterlibRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
clusterlib-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
clustermonRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
clustermon-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
cmanRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
corosyncRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
corosync-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
corosynclibRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
corosynclib-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
ctdb2.5Red Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:2.5.5-7.el6rhs | 0:2.5.5-7.el6rhs |
ctdb2.5-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:2.5.5-7.el6rhs | 0:2.5.5-7.el6rhs |
fence-virtRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virt-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtdRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-checkpointRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-libvirtRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-multicastRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-serialRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
gfs2-utilsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
gluster-nagios-addonsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.4-4.el6rhs | 0:0.2.4-4.el6rhs |
gluster-nagios-addons-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.4-4.el6rhs | 0:0.2.4-4.el6rhs |
gluster-nagios-commonRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.2.0-1.el6rhs | 0:0.2.0-1.el6rhs |
glusterfsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-apiRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-api-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-client-xlatorsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-fuseRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-ganeshaRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-geo-replicationRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-rdmaRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-serverRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
gstatusRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.64-3.1.el6rhs | 0:0.64-3.1.el6rhs |
gstatus-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.64-3.1.el6rhs | 0:0.64-3.1.el6rhs |
libqbRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.17.1-1.el6 | 0:0.17.1-1.el6 |
libqb-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.17.1-1.el6 | 0:0.17.1-1.el6 |
libqb-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.17.1-1.el6 | 0:0.17.1-1.el6 |
libvirt-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.10.2-54.el6 | 0:0.10.2-54.el6 |
libvirt-lock-sanlockRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.10.2-54.el6 | 0:0.10.2-54.el6 |
modclusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
nagios-pluginsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-ide_smartRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-procsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nrpeRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
nrpe-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
openaisRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openais-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openaislibRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openaislib-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openstack-swiftRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-accountRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-containerRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-objectRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-proxyRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
pacemakerRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-cluster-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-ctsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-libs-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-remoteRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pcsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.9.139-9.el6 | 0:0.9.139-9.el6 |
pcs-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.9.139-9.el6 | 0:0.9.139-9.el6 |
python-blivetRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 1:1.0.0.2-1.el6rhs | 1:1.0.0.2-1.el6rhs |
python-clufterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
python-cpopenRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
python-cpopen-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
python-eventletRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.14.0-1.el6 | 0:0.14.0-1.el6 |
python-eventlet-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.14.0-1.el6 | 0:0.14.0-1.el6 |
python-glusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
python-greenletRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.4.2-1.el6 | 0:0.4.2-1.el6 |
python-greenlet-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.4.2-1.el6 | 0:0.4.2-1.el6 |
python-greenlet-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.4.2-1.el6 | 0:0.4.2-1.el6 |
python-keystoneclientRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 1:0.9.0-5.el6ost | 1:0.9.0-5.el6ost |
python-keystoneclient-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 1:0.9.0-5.el6ost | 1:0.9.0-5.el6ost |
python-prettytableRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.7.2-1.el6 | 0:0.7.2-1.el6 |
python-pyudevRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.15-2.el6rhs | 0:0.15-2.el6rhs |
redhat-storage-logosRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:60.0.20-1.el6rhs | 0:60.0.20-1.el6rhs |
redhat-storage-serverRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.1.0.3-1.el6rhs | 0:3.1.0.3-1.el6rhs |
resource-agentsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.9.5-24.el6 | 0:3.9.5-24.el6 |
resource-agents-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.9.5-24.el6 | 0:3.9.5-24.el6 |
resource-agents-sapRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:3.9.5-24.el6 | 0:3.9.5-24.el6 |
ricciRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-81.el6 | 0:0.16.2-81.el6 |
ricci-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.16.2-81.el6 | 0:0.16.2-81.el6 |
userspace-rcuRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.7.9-2.el6rhs | 0:0.7.9-2.el6rhs |
userspace-rcu-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.7.9-2.el6rhs | 0:0.7.9-2.el6rhs |
userspace-rcu-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:0.7.9-2.el6rhs | 0:0.7.9-2.el6rhs |
vdsmRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-debug-pluginRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-glusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-ethtool-optionsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-faqemuRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-openstacknetRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-qemucmdlineRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-jsonrpcRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-pythonRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-python-zombiereaperRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-regRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-testsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-xmlrpcRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-yajsonrpcRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs | before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
glusterfsRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-apiRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-api-develRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-cliRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-client-xlatorsRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-debuginfoRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-develRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-fuseRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-libsRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-rdmaRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
python-glusterRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs | before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
openstack-swiftSUSE:OpenStack Cloud 5 From an advisory covering 3 CVEs | before 2.1.0-11.1 | 2.1.0-11.1 |
openstack-swift-docSUSE:OpenStack Cloud 5 From an advisory covering 3 CVEs | before 2.1.0-11.1 | 2.1.0-11.1 |
swiftUbuntu:14.04:LTS | before 1.13.1-0ubuntu1.2, plus listed versions 1.10.0~rc1-0ubuntu11.10.0-0ubuntu11.11.0-0ubuntu21.12.0-0ubuntu11.13.0-0ubuntu1 Show 4 moreShow less1.13.1~rc1-0ubuntu21.13.1~rc2-0ubuntu11.13.1-0ubuntu11.13.1-0ubuntu1.1 | 1.13.1-0ubuntu1.2 |
swiftUbuntu:14.04:LTS From an advisory covering 2 CVEs | before 1.13.1-0ubuntu1.2, plus listed versions 1.10.0~rc1-0ubuntu11.10.0-0ubuntu11.11.0-0ubuntu21.12.0-0ubuntu11.13.0-0ubuntu1 Show 4 moreShow less1.13.1~rc1-0ubuntu21.13.1~rc2-0ubuntu11.13.1-0ubuntu11.13.1-0ubuntu1.1 | 1.13.1-0ubuntu1.2 |
What each source reports
NVD Score used
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
CVE-2014-7960- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:P/A:N - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
CVE-2014-7960- Updated
- 2026-11-02
EUVDEUVD-2022-3908No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
EUVD-2022-3908- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g6x3-55qv-x6p2No score
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
GHSA-g6x3-55qv-x6p2- Updated
- 2026-11-02
OSVNo score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
CVE-2014-7960- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-7960No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
DEBIAN-CVE-2014-7960- Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-g6x3-55qv-x6p2No score
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
GHSA-g6x3-55qv-x6p2- Updated
- 2026-11-02
OSVPYSEC-2026-933No score
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
PYSEC-2026-933- Updated
- 2026-11-02
OSVSUSE-SU-2015:1846-1No score
Security update for openstack-swift
openstack-swift was updated to fix three security issues.
These security issues were fixed:
- CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is configured, allowed remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container (bsc#927793).
- CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined (bsc#900253).
- CVE-2015-5223: Information leak via Swift tempurls (bsc#942641).
- Record
SUSE-SU-2015:1846-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-7960No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
UBUNTU-CVE-2014-7960- Updated
- 2026-11-02
OSVUSN-2704-1No score
swift vulnerabilities
Rajaneesh Singh discovered Swift does not properly enforce metadata limits. An attacker could abuse this issue to store more metadata than allowed by policy. (CVE-2014-7960)
Clay Gerrard discovered Swift allowed users to delete the latest version of object regardless of object permissions when allow_version is configured. An attacker could use this issue to delete objects. (CVE-2015-1856)
- Record
USN-2704-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html
openwall.com/lists/oss-security/2014/10/08/7
bugs.launchpad.net/swift/+bug/1365350
rhn.redhat.com/errata/RHSA-2015-1495.html
exchange.xforce.ibmcloud.com/vulnerabilities/96901
Show 194 moreShow less
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
ubuntu.com/usn/USN-2704-1
securityfocus.com/bid/70279
nvd.nist.gov/vuln/detail/CVE-2014-7960
github.com/openstack/swift/commit/06800cbe446ce4c937a57b69517b55c3bba9b6e1
security-tracker.debian.org/tracker/CVE-2014-7960
pypi.org/project/swift
access.redhat.com/errata/RHSA-2015:0835
bugzilla.redhat.com/show_bug.cgi?id=1150461
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0835.json
cve.org/CVERecord?id=CVE-2014-7960
suse.com/support/update/announcement/2015/suse-su-20151846-1
bugzilla.suse.com/900253
ubuntu.com/security/CVE-2014-7960
marc.info?l=oss-security&m=141275839830221&w=2
lists.openstack.org/pipermail/openstack-announce/2014-October/000291.html
This page doesn't list everything
Left out here: 196 references. The JSON record has them.