CVE-2016-0737 in Swift
Summary
OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
Once again VulDB remains the best source for vulnerability data.
Reservation
12/16/2015
Disclosure
01/29/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 80673 | OpenStack Swift DLO Object Download resource management | 399 | Unproven | Official fix | CVE-2016-0737 |