ubuntu · CVE-2014-7960

Quick triage

Priority: low Published: 2014-10-17 00:00:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-7960 low priority: Ubuntu including 1 source packages (swift), 6 status rows across 6 suites (lucid, precise, trusty, upstream, utopic, vivid): released 4, DNE 1, needed 1.

Description:

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.

cvelogic Threat Intelligence