OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "python-swift"
},
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "swift"
},
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "swift-account"
},
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "swift-container"
},
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "swift-object"
},
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "swift-object-expirer"
},
{
"binary_version": "1.13.1-0ubuntu1.5",
"binary_name": "swift-proxy"
}
]
}