CVE-2012-4406
Fixed in a distro release EPSS 7%
OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.
Products: openstack swift, fedoraproject fedora, redhat gluster_storage_management_console, redhat gluster_storage_server_for_on-premise, redhat storage, redhat storage_for_public_cloud, redhat enterprise_linux_server
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | swift | 1.7.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | swift | 1.4.8-2 |
| Debian 13 | swift | 1.4.8-2 |
| Debian 14 | swift | 1.4.8-2 |
| Red Hat openstack 1 | openstack-swift | 0:1.4.8-5.el6 |
| Red Hat openstack 1 | openstack-swift-account | 0:1.4.8-5.el6 |
| Red Hat openstack 1 | openstack-swift-container | 0:1.4.8-5.el6 |
| Red Hat openstack 1 | openstack-swift-doc | 0:1.4.8-5.el6 |
| Red Hat openstack 1 | openstack-swift-object | 0:1.4.8-5.el6 |
| Red Hat openstack 1 | openstack-swift-proxy | 0:1.4.8-5.el6 |
| Red Hat storage 2.0 console el6 | rhsc | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-backend | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-config | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-dbscripts | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-genericapi | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-jboss-deps | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-notification-service | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-restapi | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-setup | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-tools-common | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-userportal | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-webadmin-portal | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | vdsm | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 console el6 | vdsm-bootstrap | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | appliance | 0:1.7.1-1.el6rhs |
| Red Hat storage 2.0 server el6 | appliance-base | 0:1.7.1-1.el6rhs |
| Red Hat storage 2.0 server el6 | augeas | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | augeas-debuginfo | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | augeas-devel | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | augeas-libs | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | gluster-swift | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-account | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-container | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-doc | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-object | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-proxy | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-debuginfo | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-devel | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-fuse | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-geo-replication | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-rdma | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-server | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | libvirt | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-client | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-debuginfo | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-devel | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-lock-sanlock | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-python | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | rhn-check | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | rhn-client-tools | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | rhn-setup | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | rhn-setup-gnome | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | sanlock | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-debuginfo | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-devel | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-lib | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-python | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sos | 0:2.2-17.2.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-bootstrap | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-cli | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-debug-plugin | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-debuginfo | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-gluster | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-hook-faqemu | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-hook-vhostmd | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-python | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-reg | 0:4.9.6-20.el6rhs |
| Red Hat storage 2 client el5 | glusterfs | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-debuginfo | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-devel | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-fuse | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-rdma | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 3 client el6 | glusterfs | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-debuginfo | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-devel | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-fuse | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-rdma | 0:3.3.0.7rhs-1.el6 |