|
|
| |
|
| |
swift: denial of service
| Package(s): | swift |
CVE #(s): | CVE-2013-4155
|
| Created: | August 13, 2013 |
Updated: | September 4, 2013 |
| Description: |
From the Debian advisory:
Peter Portante from Red Hat reported a vulnerability in Swift.
By issuing requests with an old X-Timestamp value, an
authenticated attacker can fill an object server with superfluous
object tombstones, which may significantly slow down subsequent
requests to that object server, facilitating a Denial of Service
attack against Swift clusters. |
| Alerts: |
|
( Log in to post comments)
|
|
|