{"id":"CVE-2016-0737","aliases":["GHSA-972c-cfv8-2hq8","PYSEC-2026-929"],"title":"OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service","summary":"OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"swift","product":"swift","ecosystem":"pip","affected":["swift < 2.4.0"],"patched":["swift 2.4.0"],"published":"2022-05-17","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-972c-cfv8-2hq8","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0737"},{"url":"https://access.redhat.com/errata/RHSA-2016:0126"},{"url":"https://access.redhat.com/errata/RHSA-2016:0127"},{"url":"https://access.redhat.com/errata/RHSA-2016:0128"},{"url":"https://access.redhat.com/errata/RHSA-2016:0155"},{"url":"https://access.redhat.com/errata/RHSA-2016:0328"},{"url":"https://access.redhat.com/errata/RHSA-2016:0329"},{"url":"https://access.redhat.com/security/cve/CVE-2016-0737"},{"url":"https://bugs.launchpad.net/swift/+bug/1466549"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298924"},{"url":"https://launchpad.net/swift/+milestone/2.4.0"},{"url":"https://opendev.org/openstack/swift"},{"url":"https://review.openstack.org/#/c/217750"},{"url":"https://security.openstack.org/ossa/OSSA-2016-004.html"},{"url":"https://web.archive.org/web/20200228001102/http://www.securityfocus.com/bid/81432"}],"tags":["osv","pip"],"epss":0.03754,"epssPercentile":0.89421,"ingestedAt":"2026-07-08T18:25:47.773Z","slug":"CVE-2016-0737","body":"## Overview\n\nOpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.\n\n## Affected packages\n\n- `swift < 2.4.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `swift 2.4.0`","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.8,"exploitation":0,"ransomware":0},"changes":[]}