OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-10-22T23:00:00

Updated: 2024-08-06T20:35:09.281Z

Reserved: 2012-08-21T00:00:00

Link: CVE-2012-4406

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-10-22T23:55:06.743

Modified: 2024-11-21T01:42:49.180

Link: CVE-2012-4406

cve-icon Redhat

Severity : Important

Publid Date: 2012-05-30T00:00:00Z

Links: CVE-2012-4406 - Bugzilla