Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS05NzJjLWNmdjgtMmhxOM4AAcxu

OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

Permalink: https://github.com/advisories/GHSA-972c-cfv8-2hq8
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NzJjLWNmdjgtMmhxOM4AAcxu
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: about 1 year ago


CVSS Score: 7.5
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-972c-cfv8-2hq8, CVE-2016-0737
References: Blast Radius: 12.9

Affected Packages

pypi:swift
Dependent packages: 1
Dependent repositories: 53
Downloads: 1,756 last month
Affected Version Ranges: < 2.4.0
Fixed in: 2.4.0
All affected versions: 1.0.2
All unaffected versions: 2.15.2, 2.17.1, 2.19.1, 2.19.2, 2.20.0, 2.21.0, 2.21.1, 2.22.0, 2.23.0, 2.23.1, 2.23.2, 2.23.3, 2.24.0, 2.25.0, 2.25.1, 2.25.2, 2.26.0, 2.27.0, 2.28.0, 2.28.1, 2.29.0, 2.29.1, 2.29.2, 2.30.0, 2.30.1, 2.31.0, 2.31.1, 2.32.0, 2.33.0