CVE-2015-5242
Fixed in a distro release EPSS 2%
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
Products: redhat gluster_storage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat storage 3.1 server el6 | swiftonfile | 0:1.13.1-6.el6rhs |
| Red Hat storage 3.1 server el7 | swiftonfile | 0:1.13.1-6.el7rhgs |