GitHub Advisoryadvisory · PyPI
GHSA-972c-cfv8-2hq8 OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
HIGH
Official page ↗
- Aliases
- CVE-2016-0737
- Ecosystem
- PyPI
- Packages
- swift
- Severity
- High
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Reviewed
- 2023-02-08
Affected packages
• PyPI swift: < 2.4.0 → fixed in 2.4.0
Description
OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
Related
Alias · CVE (1)
- CVE-2016-0737 OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-0737 advisory
- https://access.redhat.com/errata/RHSA-2016:0126 web
- https://access.redhat.com/errata/RHSA-2016:0127 web
- https://access.redhat.com/errata/RHSA-2016:0128 web
- https://access.redhat.com/errata/RHSA-2016:0155 web
- https://access.redhat.com/errata/RHSA-2016:0328 web
- https://access.redhat.com/errata/RHSA-2016:0329 web
- https://access.redhat.com/security/cve/CVE-2016-0737 web
- https://bugs.launchpad.net/swift/+bug/1466549 web
- https://bugzilla.redhat.com/show_bug.cgi?id=1298924 web
- https://launchpad.net/swift/+milestone/2.4.0 web
- https://opendev.org/openstack/swift package
- https://review.openstack.org/#/c/217750 web
- https://security.openstack.org/ossa/OSSA-2016-004.html web
- https://web.archive.org/web/20200228001102/http://www.securityfocus.com/bid/81432 web