debian · CVE-2012-4406

Quick triage

Priority: not yet assigned Published: Updated: Tue, 30 Jun 2026 01:59:28 GMT

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-4406 not yet assigned priority: Debian including 1 source packages (swift), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.

Description:

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

cvelogic Threat Intelligence