CVE-2013-4155
OpenStack Swift allows authenticated users to cause a denial of service
EPSS 1.0%
Description
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
How to fix CVE-2013-4155
To remediate CVE-2013-4155, upgrade the affected package to a fixed version below.
- Debian/swift—upgrade to 1.8.0-7 or later
- PyPI/swift—upgrade to 1.9.1 or later
Is CVE-2013-4155 being exploited?
Low — EPSS is 1.0%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 1.8.0-7
- from 0, < 1.9.1