Skip to content
OpenAdvisories
Unscored DSA-2737-1 2 CVEs

swift - several

Published Aug 12, 2013 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 swift 1.4.8-2+deb7u1

Vulnerabilities 2

  • High —

    OpenStack Swift Unchecked user input in XML responses

    XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

  • Medium —

    OpenStack Swift allows authenticated users to cause a denial of service

    OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.