CVE-2016-0738: OpenStack Object Storage (Swift) Denial of Service Vulnerability
Summary
CVE-2016-0738: OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service. Affects swift across 2 version ranges.
< 2.3.1
>= 2.4.0, < 2.5.1
Fixed in 2.3.1 or 2.5.1, depending on the release line you run. How to fix ↓
Also tracked for
- swift · Debian:11
The same CVE-2016-0738 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenStack Object Storage (Swift) is an open-source software project that provides scalable and redundant object storage for cloud computing systems. It allows users to store and retrieve large amounts of unstructured data, such as documents, images, and videos. Swift is designed to be highly available, fault-tolerant, and scalable, making it suitable for use in large-scale cloud environments. However, a vulnerability in Swift versions before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) can lead to a denial of service (DoS) attack.
Vulnerability Detail
The vulnerability in OpenStack Object Storage (Swift) arises from the improper handling of server connections. Specifically, the affected versions do not properly close server connections, allowing remote attackers to cause a DoS condition by sending a series of interrupted requests to a Large Object URL. This can result in resource exhaustion on the proxy-server, leading to service disruption and potential impact on the availability of the Swift storage infrastructure.
How To Fix
Latest published version: 2.38.3 as of 22 Oct 2026
pip install --upgrade "swift==2.38.3"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 2.3.12.3.1pip install --upgrade "swift==2.3.1" -
>= 2.4.0, < 2.5.12.5.1pip install --upgrade "swift==2.5.1"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the fixed versions of Swift.
Conclusion
The vulnerability in OpenStack Object Storage (Swift) can lead to a denial of service (DoS) condition, potentially impacting the availability of the Swift storage infrastructure. It is crucial for users to upgrade to the fixed versions of Swift (2.3.1 or 2.5.1) to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for swift →
FAQ
OpenStack Object Storage (Swift) is an open-source software project that provides scalable and redundant object storage for cloud computing systems.
The vulnerability can lead to a denial of service (DoS) condition, causing service disruption and potential impact on the availability of the Swift storage infrastructure.
Versions before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) are affected by this vulnerability.
To fix this vulnerability, it is recommended to upgrade to the fixed versions of Swift: 2.3.1 (Kilo) or 2.5.1 (Liberty).
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the fixed versions of Swift.
Related vulnerabilities
Recent vulnerabilities recorded for swift.
