GitHub Advisoryadvisory · PyPI

GHSA-fxwr-2vxm-cg7p OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

HIGH Published 2022-05-17 Modified 2023-02-08 Official page ↗
Aliases
CVE-2016-0738
Ecosystem
PyPI
Packages
swift
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed
2023-02-08

Affected packages

• PyPI swift: < 2.3.1 → fixed in 2.3.1 • PyPI swift: >= 2.4.0, < 2.5.1 → fixed in 2.5.1

Description

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

Related

Alias · CVE (1)

  • CVE-2016-0738 OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections,… vulnerability

References