OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
{
"binaries": [
{
"binary_name": "python-swift",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-account",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-container",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-object",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-object-expirer",
"binary_version": "1.13.1-0ubuntu1.5"
},
{
"binary_name": "swift-proxy",
"binary_version": "1.13.1-0ubuntu1.5"
}
],
"availability": "No subscription required"
}