CVE-2015-1856
Fixed in a distro release EPSS 4%
OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.
Products: openstack swift, canonical ubuntu_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | swift | 2.3.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | swift | 2.2.0-2 |
| Debian 13 | swift | 2.2.0-2 |
| Debian 14 | swift | 2.2.0-2 |
| Red Hat Enterprise Linux 7 | glusterfs | 0:3.7.1-16.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-cli | 0:3.7.1-16.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-debuginfo | 0:3.7.1-16.el7 |
| Red Hat openstack 5 | openstack-swift | 0:1.13.1-5.el7ost |
| Red Hat openstack 5 | openstack-swift | 0:1.13.1-6.el6ost |
| Red Hat openstack 5 | openstack-swift-account | 0:1.13.1-5.el7ost |
| Red Hat openstack 5 | openstack-swift-account | 0:1.13.1-6.el6ost |
| Red Hat openstack 5 | openstack-swift-container | 0:1.13.1-5.el7ost |
| Red Hat openstack 5 | openstack-swift-container | 0:1.13.1-6.el6ost |
| Red Hat openstack 5 | openstack-swift-doc | 0:1.13.1-5.el7ost |
| Red Hat openstack 5 | openstack-swift-doc | 0:1.13.1-6.el6ost |
| Red Hat openstack 5 | openstack-swift-object | 0:1.13.1-5.el7ost |
| Red Hat openstack 5 | openstack-swift-object | 0:1.13.1-6.el6ost |
| Red Hat openstack 5 | openstack-swift-proxy | 0:1.13.1-6.el6ost |
| Red Hat openstack 5 | openstack-swift-proxy | 0:1.13.1-5.el7ost |
| Red Hat openstack 6 | openstack-swift | 0:2.2.0-4.el7ost |
| Red Hat openstack 6 | openstack-swift-account | 0:2.2.0-4.el7ost |
| Red Hat openstack 6 | openstack-swift-container | 0:2.2.0-4.el7ost |
| Red Hat openstack 6 | openstack-swift-doc | 0:2.2.0-4.el7ost |
| Red Hat openstack 6 | openstack-swift-object | 0:2.2.0-4.el7ost |
| Red Hat openstack 6 | openstack-swift-proxy | 0:2.2.0-4.el7ost |
| Red Hat storage 3.1 nagios el6 | gluster-nagios-common | 0:0.2.2-1.el6rhs |
| Red Hat storage 3.1 nagios el6 | nagios-server-addons | 0:0.2.2-1.el6rhs |
| Red Hat storage 3.1 nagios el7 | gluster-nagios-common | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 nagios el7 | nagios-server-addons | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 nagios el7 | nagios-server-addons-debuginfo | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 nfs el6 | nfs-ganesha | 0:2.2.0-9.el6rhs |
| Red Hat storage 3.1 nfs el6 | nfs-ganesha-debuginfo | 0:2.2.0-9.el6rhs |
| Red Hat storage 3.1 nfs el6 | nfs-ganesha-gluster | 0:2.2.0-9.el6rhs |
| Red Hat storage 3.1 nfs el7 | nfs-ganesha | 0:2.2.0-9.el7rhgs |
| Red Hat storage 3.1 nfs el7 | nfs-ganesha-debuginfo | 0:2.2.0-9.el7rhgs |
| Red Hat storage 3.1 nfs el7 | nfs-ganesha-gluster | 0:2.2.0-9.el7rhgs |
| Red Hat storage 3.1 server el6 | gdeploy | 0:1.0-12.el6rhs |
| Red Hat storage 3.1 server el6 | gluster-nagios-addons | 0:0.2.5-1.el6rhs |
| Red Hat storage 3.1 server el6 | gluster-nagios-addons-debuginfo | 0:0.2.5-1.el6rhs |
| Red Hat storage 3.1 server el6 | gluster-nagios-common | 0:0.2.2-1.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-api | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-api-devel | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-cli | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-client-xlators | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-debuginfo | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-devel | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-fuse | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-ganesha | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-geo-replication | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-libs | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-rdma | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-server | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | gstatus | 0:0.65-1.el6rhs |
| Red Hat storage 3.1 server el6 | gstatus-debuginfo | 0:0.65-1.el6rhs |
| Red Hat storage 3.1 server el6 | openstack-swift | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-account | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-container | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-doc | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-object | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-proxy | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | python-gluster | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | redhat-storage-server | 0:3.1.1.0-2.el6rhs |
| Red Hat storage 3.1 server el6 | swiftonfile | 0:1.13.1-5.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-cli | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-debug-plugin | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-debuginfo | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-gluster | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-ethtool-options | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-faqemu | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-openstacknet | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-qemucmdline | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-jsonrpc | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-python | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-python-zombiereaper | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-reg | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-tests | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-xmlrpc | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-yajsonrpc | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el7 | gdeploy | 0:1.0-12.el7rhgs |
| Red Hat storage 3.1 server el7 | gluster-nagios-addons | 0:0.2.5-1.el7rhgs |
| Red Hat storage 3.1 server el7 | gluster-nagios-addons-debuginfo | 0:0.2.5-1.el7rhgs |
| Red Hat storage 3.1 server el7 | gluster-nagios-common | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-api | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-api-devel | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-cli | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-client-xlators | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-debuginfo | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-devel | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-fuse | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-ganesha | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-geo-replication | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-libs | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-rdma | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-server | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | gstatus | 0:0.65-1.el7rhgs |
| Red Hat storage 3.1 server el7 | gstatus-debuginfo | 0:0.65-1.el7rhgs |
| Red Hat storage 3.1 server el7 | openstack-swift | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-account | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-container | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-doc | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-object | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-proxy | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | python-gluster | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | redhat-storage-server | 0:3.1.1.0-2.el7rhgs |
| Red Hat storage 3.1 server el7 | swiftonfile | 0:1.13.1-5.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-cli | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-debug-plugin | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-debuginfo | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-gluster | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-ethtool-options | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-faqemu | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-openstacknet | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-qemucmdline | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-jsonrpc | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-python | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-python-zombiereaper | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-reg | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-tests | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-xmlrpc | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-yajsonrpc | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3 client el6 | glusterfs | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-api | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-api-devel | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-cli | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-client-xlators | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-debuginfo | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-devel | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-fuse | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-libs | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-rdma | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | python-gluster | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el7 | glusterfs | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-api | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-api-devel | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-cli | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-client-xlators | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-debuginfo | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-devel | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-fuse | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-libs | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-rdma | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | python-gluster | 0:3.7.1-16.el7 |
| SUSE OpenStack Cloud 5 | openstack-swift | 2.1.0-11.1 |
| SUSE OpenStack Cloud 5 | openstack-swift-doc | 2.1.0-11.1 |
| Ubuntu 14.04 LTS | swift | 1.13.1-0ubuntu1.2 |