Description: A flaw was found in the metadata constraints in gluster-swift package. By adding metadata in several separate calls, a malicious user could bypass the maxmetacount constraint, and store more metadata than allowed by the configuration.

References: http://seclists.org/oss-sec/2015/q3/448 https://review.openstack.org/#/c/215487

A flaw was found in the way swiftonfile (gluster-swift) serializes and stores metadata on disk by using Python's pickle module (https://docs.python.org/2/library/pickle.html). Exploiting this flaw causes remote code execution of arbitrary code on the storage node.