CVE-2016-0738

CVE-2016-0738 affects OpenStack Swift (Object Storage) prior to 2.3.1 in Kilo, 2.4.x, and prior to 2.5.1 in Liberty. The issue is a memory-leak/unfinished-read vulnerability that can allow a remote attacker (authenticated) to cause a denial of service by exhausting proxy-server resources through ...

CVE-2016-0737

CVE-2016-0737 affects OpenStack Swift before 2.4.0, where the proxy-server may consume resources due to not properly closing client connections after interrupted requests to a Large Object URL. This is corroborated by multiple connected entries (GHSA-972C-CFV8-2HQ8; RHSA advisories) indicating op...