CVE-2012-4406

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html	Mailing List
http://rhn.redhat.com/errata/RHSA-2012-1379.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0691.html	Not Applicable
http://www.openwall.com/lists/oss-security/2012/09/05/16	Mailing List
http://www.openwall.com/lists/oss-security/2012/09/05/4	Mailing List
http://www.securityfocus.com/bid/55420	Broken Link
https://bugs.launchpad.net/swift/+bug/1006414	Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=854757	Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/79140	Third Party Advisory VDB Entry
https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a	Patch
https://launchpad.net/swift/+milestone/1.7.0	Release Notes
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html	Mailing List
http://rhn.redhat.com/errata/RHSA-2012-1379.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0691.html	Not Applicable
http://www.openwall.com/lists/oss-security/2012/09/05/16	Mailing List
http://www.openwall.com/lists/oss-security/2012/09/05/4	Mailing List
http://www.securityfocus.com/bid/55420	Broken Link
https://bugs.launchpad.net/swift/+bug/1006414	Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=854757	Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/79140	Third Party Advisory VDB Entry
https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a	Patch
https://launchpad.net/swift/+milestone/1.7.0	Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:openstack:swift:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*

Configuration 3 (hide)

OR	cpe:2.3:a:redhat:gluster_storage_management_console:2.0:::::::*
	cpe:2.3:a:redhat:gluster_storage_server_for_on-premise:2.0:::::::*
	cpe:2.3:a:redhat:storage:2.0:::::::*
	cpe:2.3:a:redhat:storage_for_public_cloud:2.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*

History

21 Nov 2024, 01:42

Type	Values Removed	Values Added
References	~~() http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html - Mailing List~~	() http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html - Mailing List
References	~~() http://rhn.redhat.com/errata/RHSA-2012-1379.html - Third Party Advisory~~	() http://rhn.redhat.com/errata/RHSA-2012-1379.html - Third Party Advisory
References	~~() http://rhn.redhat.com/errata/RHSA-2013-0691.html - Not Applicable~~	() http://rhn.redhat.com/errata/RHSA-2013-0691.html - Not Applicable
References	~~() http://www.openwall.com/lists/oss-security/2012/09/05/16 - Mailing List~~	() http://www.openwall.com/lists/oss-security/2012/09/05/16 - Mailing List
References	~~() http://www.openwall.com/lists/oss-security/2012/09/05/4 - Mailing List~~	() http://www.openwall.com/lists/oss-security/2012/09/05/4 - Mailing List
References	~~() http://www.securityfocus.com/bid/55420 - Broken Link~~	() http://www.securityfocus.com/bid/55420 - Broken Link
References	~~() https://bugs.launchpad.net/swift/+bug/1006414 - Issue Tracking, Patch~~	() https://bugs.launchpad.net/swift/+bug/1006414 - Issue Tracking, Patch
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=854757 - Issue Tracking, Patch~~	() https://bugzilla.redhat.com/show_bug.cgi?id=854757 - Issue Tracking, Patch
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/79140 - Third Party Advisory, VDB Entry~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/79140 - Third Party Advisory, VDB Entry
References	~~() https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a - Patch~~	() https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a - Patch
References	~~() https://launchpad.net/swift/+milestone/1.7.0 - Release Notes~~	() https://launchpad.net/swift/+milestone/1.7.0 - Release Notes

25 Jan 2024, 02:13

Information

Published : 2012-10-22 23:55

Updated : 2025-04-11 00:51

NVD link : CVE-2012-4406

Mitre link : CVE-2012-4406

CVE.ORG link : CVE-2012-4406

JSON object : View

Products Affected

redhat

gluster_storage_management_console
storage
enterprise_linux_server
gluster_storage_server_for_on-premise
storage_for_public_cloud

fedoraproject

fedora

openstack

swift

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2012-4406", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2012-10-22T23:55:06.743", "references": [{"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-1379.html", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-0691.html", "tags": ["Not Applicable"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/09/05/16", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/09/05/4", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/55420", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "https://bugs.launchpad.net/swift/+bug/1006414", "tags": ["Issue Tracking", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=854757", "tags": ["Issue Tracking", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79140", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "https://launchpad.net/swift/+milestone/1.7.0", "tags": ["Release Notes"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089472.html", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-1379.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-0691.html", "tags": ["Not Applicable"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2012/09/05/16", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2012/09/05/4", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/55420", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugs.launchpad.net/swift/+bug/1006414", "tags": ["Issue Tracking", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=854757", "tags": ["Issue Tracking", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79140", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://launchpad.net/swift/+milestone/1.7.0", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object."}, {"lang": "es", "value": "OpenStack Object Storage (swift) antes de v1.7.0 utiliza la funci\u00f3n loads en el m\u00f3dulo pickle de Python de forma no segura al almacenar y cargar los metadatos en memcached, lo que permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un objeto pickle modificado."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openstack:swift:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD5D7F7C-3474-4354-8531-CC28D6F3B635", "versionEndExcluding": "1.7.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "706C6399-CAD1-46E3-87A2-8DFE2CF497ED"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:gluster_storage_management_console:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0923F044-C68D-4A4A-96E1-C498F3A77C10"}, {"criteria": "cpe:2.3:a:redhat:gluster_storage_server_for_on-premise:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59D47E43-886E-4114-96A2-DBE719EA3A89"}, {"criteria": "cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52B90A04-DD6D-4AE7-A0E5-6B381127D507"}, {"criteria": "cpe:2.3:a:redhat:storage_for_public_cloud:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0257753-51C3-45F2-BAA4-4C1F2DEAB7A6"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54D669D4-6D7E-449D-80C1-28FA44F06FFE"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}

9.8 /10