{"id":"CVE-2016-0737","aliases":["DEBIAN-CVE-2016-0737","EUVD-2022-3307","GHSA-972c-cfv8-2hq8","PYSEC-2026-929","RHSA-2016:0126","RHSA-2016:0127","RHSA-2016:0128","RHSA-2016:0155","RHSA-2016:0328","RHSA-2016:0329","UBUNTU-CVE-2016-0737","USN-3451-1"],"status":"published","title":"OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03925,"percentile":0.90425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2016-01-29T00:00:00Z","modified":"2026-10-24T10:30:22Z","fixes":[{"ecosystem":"PyPI","package":"swift","fixed_in":["2.4.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"swift","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"swift","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"swift","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"swift","fixed_in":["1.13.1-0ubuntu1.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0"}]}],"versions":["1.0.2"]},{"source":"osv","ecosystem":"PyPI","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0"}]}],"versions":["1.0.2"]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-3.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-3.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-3.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-3.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-3.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-3.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el6ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-0ubuntu1.5"}]}],"versions":["1.10.0~rc1-0ubuntu1","1.10.0-0ubuntu1","1.11.0-0ubuntu2","1.12.0-0ubuntu1","1.13.0-0ubuntu1","1.13.1~rc1-0ubuntu2","1.13.1~rc2-0ubuntu1","1.13.1-0ubuntu1","1.13.1-0ubuntu1.1","1.13.1-0ubuntu1.2","1.13.1-0ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-0ubuntu1.5"}]}],"versions":["1.10.0~rc1-0ubuntu1","1.10.0-0ubuntu1","1.11.0-0ubuntu2","1.12.0-0ubuntu1","1.13.0-0ubuntu1","1.13.1~rc1-0ubuntu2","1.13.1~rc2-0ubuntu1","1.13.1-0ubuntu1","1.13.1-0ubuntu1.1","1.13.1-0ubuntu1.2","1.13.1-0ubuntu1.3"],"bundled":3}],"products":[{"vendor":"openstack","product":"swift"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0329.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/81432","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0128.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://review.openstack.org/#/c/217750/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0155.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugs.launchpad.net/swift/+bug/1466549","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://security.openstack.org/ossa/OSSA-2016-004.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://launchpad.net/swift/+milestone/2.4.0","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0737","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0126","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0127","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0128","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0155","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0328","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0329","tags":["web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0737","tags":["web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298924","tags":["web","report"]},{"url":"https://web.archive.org/web/20200228001102/http://www.securityfocus.com/bid/81432","tags":["web"]},{"url":"https://github.com/advisories/GHSA-972c-cfv8-2hq8","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0737","tags":["advisory"]},{"url":"https://opendev.org/openstack/swift","tags":["package"]},{"url":"https://review.openstack.org/#/c/217750","tags":["web"]},{"url":"https://pypi.org/project/swift","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298905","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0126.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0737","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0738","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0738","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0127.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0128.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0155.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0328.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255622","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5223","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0329.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-0737","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/20/17","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3451-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-5223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0738","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-0737","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2016-01-29T20:00:00Z","modified":"2024-08-05T22:30:04.061Z","updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2022-3307","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2016-01-29T20:00:00Z","modified":"2024-08-05T22:30:04Z","updated_at":"2026-11-03T02:23:00.426765Z"}],"ghsa":[{"id":"GHSA-972c-cfv8-2hq8","title":"OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2022-05-17T03:32:38Z","modified":"2023-02-08T18:00:02Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:36:44.81167Z"}],"nvd":[{"id":"CVE-2016-0737","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2016-01-29T20:59:02.92Z","modified":"2026-06-17T00:38:07.587Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:03:21.143462Z"}],"osv":[{"id":"CVE-2016-0737","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2016-01-29T20:59:02.92Z","modified":"2026-10-24T10:30:22.423142252Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-0737","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2016-01-29T20:59:02.92Z","modified":"2026-09-22T07:00:04.031865206Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"GHSA-972c-cfv8-2hq8","title":"OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2022-05-17T03:32:38Z","modified":"2026-07-07T11:56:11.491702601Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:43.524801Z"},{"id":"PYSEC-2026-929","title":"OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2026-07-06T08:03:25.44441Z","modified":"2026-07-07T11:45:51.402781744Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2016-0737","description":"OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.","status":"published","published":"2016-01-29T00:00:00Z","modified":"2026-02-04T03:05:13.759924Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"RHSA-2016:0126","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T12:27:08Z","modified":"2026-10-08T10:01:09Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0127","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T12:27:03Z","modified":"2026-10-08T10:01:10Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0128","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T12:26:33Z","modified":"2026-10-08T10:01:10Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0155","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T12:26:29Z","modified":"2026-10-08T10:01:11Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0328","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T12:26:54Z","modified":"2026-10-08T10:01:12Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:0329","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T12:26:49Z","modified":"2026-10-08T10:01:13Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"USN-3451-1","title":"swift vulnerabilities","description":"It was discovered that OpenStack Swift incorrectly handled tempurls. A\nremote authenticated user in possession of a tempurl key authorized for PUT\ncould retrieve other objects in the same Swift account. (CVE-2015-5223)\n\nRomain Le Disez and Örjan Persson discovered that OpenStack Swift\nincorrectly closed client connections. A remote attacker could possibly use\nthis issue to consume resources, resulting in a denial of service.\n(CVE-2016-0737, CVE-2016-0738)\n","status":"published","published":"2017-10-11T12:01:33Z","modified":"2026-02-10T04:41:13Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}