CVE

Id
75261  
CVE No.
CVE-2014-7960  
Status
Candidate  
Description
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.  
Phase
Assigned (20141007)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
698461 75261 CVE-2014-7960 MLIST:[oss-security] 20141007 CVE request for vulnerability in OpenStack Swift  View
698462 75261 CVE-2014-7960 URL:http://www.openwall.com/lists/oss-security/2014/10/07/39  View
698463 75261 CVE-2014-7960 MLIST:[oss-security] 20141008 Re: CVE request for vulnerability in OpenStack Swift  View
698464 75261 CVE-2014-7960 URL:http://www.openwall.com/lists/oss-security/2014/10/08/7  View
698465 75261 CVE-2014-7960 CONFIRM:https://bugs.launchpad.net/swift/+bug/1365350  View
698466 75261 CVE-2014-7960 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
698467 75261 CVE-2014-7960 REDHAT:RHSA-2015:0835  View
698468 75261 CVE-2014-7960 URL:http://rhn.redhat.com/errata/RHSA-2015-0835.html  View
698469 75261 CVE-2014-7960 REDHAT:RHSA-2015:0836  View
698470 75261 CVE-2014-7960 URL:http://rhn.redhat.com/errata/RHSA-2015-0836.html  View
698471 75261 CVE-2014-7960 REDHAT:RHSA-2015:1495  View
698472 75261 CVE-2014-7960 URL:http://rhn.redhat.com/errata/RHSA-2015-1495.html  View
698473 75261 CVE-2014-7960 SUSE:SUSE-SU-2015:1846  View
698474 75261 CVE-2014-7960 URL:http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html  View
698475 75261 CVE-2014-7960 UBUNTU:USN-2704-1  View
698476 75261 CVE-2014-7960 URL:http://www.ubuntu.com/usn/USN-2704-1  View
698477 75261 CVE-2014-7960 BID:70279  View
698478 75261 CVE-2014-7960 URL:http://www.securityfocus.com/bid/70279  View
698479 75261 CVE-2014-7960 XF:openstack-swift-cve20147960-sec-bypass(96901)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16183 JVNDB-2014-005058 VDSM におけるサービス運用妨害 (DoS) の脆弱性 VDSM には、サービス運用妨害 (接続ブロック) 状態にされる脆弱性が存在します。 CVE-2014-7968 75261 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005058.html  View