Description
OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High
Affected Packages4 packages
▶PyPIswift2.4.0 — 2.5.1+1 ▶Ubuntuswift< 1.13.1-0ubuntu1.5 🔴Vulnerability Details
5GHSAOpenStack Object Storage (Swift) allows remote attackers to cause a denial of service↗2022-05-17 OSVOpenStack Object Storage (Swift) allows remote attackers to cause a denial of service↗2022-05-17 OSVswift vulnerabilities↗2017-10-11 OSVCVE-2016-0738: OpenStack Object Storage (Swift) before 2↗2016-01-29 CVEListCVE-2016-0738: OpenStack Object Storage (Swift) before 2↗2016-01-29 📋Vendor Advisories
3UbuntuOpenStack Swift vulnerabilities↗2017-10-11 Red Hatopenstack-swift: Proxy to server DoS through Large Objects↗2016-01-20 DebianCVE-2016-0738: swift - OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2....↗2016 💬Community
3BugzillaCVE-2016-0738 openstack-swift: Proxy to server DoS through Large Objects [fedora-all]↗2016-01-21 BugzillaCVE-2016-0737 openstack-swift: Client to proxy DoS through Large Objects↗2016-01-15 BugzillaCVE-2016-0738 openstack-swift: Proxy to server DoS through Large Objects↗2016-01-15