CVE-2013-4155
Title: Openstack Grizzly Memory Corruption
Memory Corruption
Proof Of Concept
No public PoC currently indexed for CVE-2013-4155.
CWE Category
CWE-119
Published Date
Aug 20, 2013
Modified Date
Jun 16, 2026
Exploit Status
Not Found
Score
4.0
CVSS v2.0
Exploit Probability (EPSS)
1.66%
Vulnerability Summary
CVE-2013-4155: OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
Impacted Vendors
Reference Links
http://rhn.redhat.com/errata/RHSA-2013-1197.html
http://www.debian.org/security/2012/dsa-2737
http://www.openwall.com/lists/oss-security/2013/08/07/6
http://www.ubuntu.com/usn/USN-2001-1
https://bugs.launchpad.net/swift/+bug/1196932
https://review.openstack.org/#/c/40643/
https://review.openstack.org/#/c/40645/
https://review.openstack.org/#/c/40646/
http://rhn.redhat.com/errata/RHSA-2013-1197.html
http://www.debian.org/security/2012/dsa-2737
http://www.openwall.com/lists/oss-security/2013/08/07/6
http://www.ubuntu.com/usn/USN-2001-1
https://bugs.launchpad.net/swift/+bug/1196932
https://review.openstack.org/#/c/40643/
https://review.openstack.org/#/c/40645/
https://review.openstack.org/#/c/40646/
CVSS v2.0
Source Entity
[email protected]
Severity
MEDIUM
4.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:L/Au:S/C:N/I:N/A:P
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2013-4155 Exploits & PoCs (Proof Of Concept)
No public PoCs found in our database for this CVE.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
N/A
Complexity
N/A
Privileges
N/A
Interaction
NONE
CVSS Vector String
AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected Stack
No specific products linked.