USN-8821-1: OpenStack Swift vulnerability
Ubuntu warns an authenticated OpenStack Swift bug can cause a denial of service.
Ubuntu security notice USN-8821-1 says OpenStack Swift incorrectly handled truncated aws-chunked PUT request bodies in its s3api middleware. An authenticated attacker could make Swift consume excessive resources and cause a denial of service. The notice does not name a CVE or report exploitation in the wild.
- Authenticated users can exhaust Swift resources with truncated PUT bodies.
- The bug is in s3api handling of aws-chunked requests.
- The notice names no CVE and reports no active exploitation.
- Vendors
- Canonical
- Products
- OpenStack SwiftUbuntu
- Organizations
- OpenStack
From the original article
It was discovered that OpenStack Swift incorrectly handled truncated aws-chunked PUT request bodies in its s3api middleware. An authenticated attacker could possibly use this issue to cause OpenStack Swift to use excessive resources, leading to a denial of service.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.