VDB
CVE-2013-4155
CVE-2013-4155
PUBLISHED
CVSS 4 MEDIUM
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
EPSS 1.68% · 76.6th percentile
Risk Scores
CVSS 2.0
4
EPSS Score
1.68%
76.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openstack | folsom | |
| openstack | havana | |
| openstack | grizzly | |
| n/a | n/a | * |
| openstack | swift | 1.1.0, 1.1.0, 1.1.0 |
| PyPI | swift | 0 |
Timeline
- Aug 20, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
References
- https://bugs.launchpad.net/swift/+bug/1196932 url
- DSA-2737 vendor-advisory
- https://review.openstack.org/#/c/40646/ url
- [oss-security] 20130807 [OSSA 2013-022] Swift Denial of Service using superfluous object tombstones (CVE-2013-4155) mailing-list
- USN-2001-1 vendor-advisory
- https://review.openstack.org/#/c/40645/ url
- https://review.openstack.org/#/c/40643/ url
- RHSA-2013:1197 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2013-4155 advisory
- https://github.com/openstack/swift/commit/1f4ec235cdfd8c868f2d6458532f9dc32c00b8ca url
- https://github.com/openstack/swift/commit/6b9806e0e8cbec60c0a3ece0bd516e0502827515 url
- https://github.com/openstack/swift package
- https://review.openstack.org/#/c/40643 url
- https://review.openstack.org/#/c/40645 url
- https://review.openstack.org/#/c/40646 url