CVE-2016-0737: High severity openstack swift3 vulnerability
Published Jan 29, 2016
·Updated
OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
Affected Software
1 affected component
Openstack Swift<=2.3.0
Remediation
Patch Available
Event History
Jan 29, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0737?
CVE-2016-0737 is classified as a denial of service vulnerability.
2
How do I fix CVE-2016-0737?
To fix CVE-2016-0737, upgrade OpenStack Object Storage (Swift) to version 2.4.0 or later.
3
What types of systems are impacted by CVE-2016-0737?
CVE-2016-0737 affects all versions of OpenStack Swift prior to 2.4.0.
4
What are the potential consequences of CVE-2016-0737?
The potential consequence of CVE-2016-0737 is exhausting proxy server resources, leading to service outages.
5
Can CVE-2016-0737 be exploited remotely?
Yes, CVE-2016-0737 can be exploited remotely by attackers through a series of interrupted requests.