CVE-2016-0738 in Swift

Resumen

por MITRE

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 2015-12-16
• Divulgación: 2016-01-29
• Moderación: aceptado
• Artículo: VDB-80674
• CPE: listo
• CWE: CWE-399 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.05795
• KEV: no
• Actividades: muy bajo
• Sector: Government, Education, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0738
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0738
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0738/