CVE-2016-0738

High

Published: 29/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, allowing remote attackers to cause a denial of service via a series of interrupted requests to a Large Object URL.

Risk Assessment

Attackers can exploit this vulnerability to exhaust proxy server resources, leading to service unavailability for users.

Recommendation

It is recommended to upgrade OpenStack Object Storage (Swift) to version 2.3.1 or later to mitigate this vulnerability.

Other vulnerabilities in OpenStack Object Storage (Swift)

CVE-2016-0737High
OpenStack Object Storage (Swift) before version 2.4.0 does not properly close client connections, allowing remote attackers to cause a denial of service via a series of interrupted requests to a Large Object URL.

Original NVD description (English source)

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.