debian · CVE-2012-4406

Quick triage

Priority: not yet assigned 公開: Updated: Mon, 13 Jul 2026 06:39:44 GMT

参照: Official debian advisory, NVD, CVE.org · CVE 詳細

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-4406 not yet assigned priority: Debian including 1 source packages (swift), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.

Description:

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

cvelogic Threat Intelligence