CVE-2016-0737

High

Published: 29/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

OpenStack Object Storage (Swift) before version 2.4.0 does not properly close client connections, allowing remote attackers to cause a denial of service via a series of interrupted requests to a Large Object URL.

Risk Assessment

Attackers can exploit this vulnerability to exhaust proxy server resources, leading to denial of service for other users.

Recommendation

It is recommended to upgrade OpenStack Object Storage (Swift) to version 2.4.0 or later to mitigate this vulnerability.

Other vulnerabilities in OpenStack Object Storage (Swift)

CVE-2016-0738High
OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, allowing remote attackers to cause a denial of service via a series of interrupted requests to a Large Object URL.

Original NVD description (English source)

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.