OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
{
"binaries": [
{
"binary_name": "python-swift",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-account",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-container",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-object",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-object-expirer",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-proxy",
"binary_version": "1.13.1-0ubuntu1.5"
}
],
"availability": "No subscription required"
}