Openstack · Openstack Object Storage · CVE-2016-0738
**Name of the Vulnerable Software and Affected Versions**
OpenStack Object Storage (Swift) versions prior to 2.3.1 (Kilo)
OpenStack Object Storage (Swift) version 2.4.x
OpenStack Object Storage (Swift) versions prior to 2.5.1 (Liberty)
**Description**
The issue allows remote attackers to cause a denial of service by consuming proxy-server resources through a series of interrupted requests to a Large Object URL, due to improper closure of server connections.
**Recommendations**
For versions prior to 2.3.1 (Kilo), update to version 2.3.1 or later to resolve the issue.
For version 2.4.x, update to version 2.5.1 or later to resolve the issue.
For versions prior to 2.5.1 (Liberty), update to version 2.5.1 or later to resolve the issue.