CVE-2014-8177

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.

Score

CVSS 3.0 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2016-06-07

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Gluster Storage Management Console (Redhat)
• Gluster Storage Server (Redhat)
• Storage Native Client (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2015-1845.html
• http://rhn.redhat.com/errata/RHSA-2015-1846.html
• http://www.openwall.com/lists/oss-security/2015/08/27/5
• https://bugzilla.redhat.com/show_bug.cgi?id=1257525