{"id":"CVE-2013-4155","published":"2013-08-20T22:00:00Z","modified":"2024-08-06T16:30:50Z","title":"OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service…","vendor":null,"product":null,"tier":"tail","description":{"text":"OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service (\"superfluous\" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01675,"percentile":0.7677,"provenance":"source"},"cwes":[],"references":[{"url":"https://bugs.launchpad.net/swift/+bug/1196932","tags":["x_refsource_CONFIRM"]},{"url":"http://www.debian.org/security/2012/dsa-2737","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://review.openstack.org/#/c/40646/","tags":["x_refsource_MISC"]},{"url":"http://www.openwall.com/lists/oss-security/2013/08/07/6","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.ubuntu.com/usn/USN-2001-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://review.openstack.org/#/c/40645/","tags":["x_refsource_MISC"]},{"url":"https://review.openstack.org/#/c/40643/","tags":["x_refsource_MISC"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1197.html","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":15.4,"factors":[{"name":"EPSS percentile","points":15.35}]},"affected":[{"ecosystem":"PyPI","package":"swift","vulnerableRanges":["<1.9.1"],"patched":["1.9.1"],"from":["GHSA-wxx2-gqvv-34hx","PYSEC-2026-935"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5678","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-swift-cve-2013-2161","children":[{"from":"CVE-2013-4155","to":"CVE-2014-7960","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["swift/obj/diskfile.py"],"commits":["https://github.com/openstack/swift/commit/1f4ec235cdfd8c868f2d6458532f9dc32c00b8ca","https://github.com/openstack/swift/commit/6b9806e0e8cbec60c0a3ece0bd516e0502827515","https://github.com/openstack/swift/commit/06800cbe446ce4c937a57b69517b55c3bba9b6e1","https://github.com/openstack/swift/commit/2c4622a28ea04e1c6b2382189b0a1f6cccdc9c0f"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2012-4406","published":"2012-10-22","fixed":"1.7.0","kev":false},{"cve":"CVE-2013-2161","published":"2013-08-20","fixed":"1.9.0","kev":false,"link":{"from":"CVE-2013-2161","to":"CVE-2013-4155","relation":"successor","confidence":"medium","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:swift","fromFixed":"1.9.0","toFixed":"1.9.1","daysApart":0},{"kind":"similar","provenance":"machine","score":0.43,"basis":"same package + description similarity"}]}},{"cve":"CVE-2013-4155","published":"2013-08-20","fixed":"1.9.1","kev":false},{"cve":"CVE-2014-0006","published":"2014-01-23","fixed":"1.12.0","kev":false,"link":{"from":"CVE-2013-4155","to":"CVE-2014-0006","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:swift","fromFixed":"1.9.1","toFixed":"1.12.0","daysApart":156}]}},{"cve":"CVE-2014-3497","published":"2014-07-03","fixed":"2.0.0","kev":false},{"cve":"CVE-2014-7960","published":"2014-10-17","fixed":"2.2.0","kev":false}],"package":"PyPI:swift"}}