CVE-2016-0738: High severity openstack swift3 vulnerability
OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0738?
CVE-2016-0738 is considered a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2016-0738?
To fix CVE-2016-0738, upgrade OpenStack Object Storage (Swift) to version 2.3.1 or later for Kilo, and 2.5.1 or later for Liberty.
What versions of OpenStack Swift are affected by CVE-2016-0738?
CVE-2016-0738 affects OpenStack Swift versions 2.3.0 and earlier, as well as versions 2.4.0 and 2.5.0.
What type of attack does CVE-2016-0738 allow?
CVE-2016-0738 allows remote attackers to launch a denial-of-service attack via a series of interrupted requests.
Can exploiting CVE-2016-0738 lead to resource exhaustion?
Yes, exploiting CVE-2016-0738 can lead to proxy-server resource exhaustion, impacting server performance.