The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins to version 2.363Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 2.361.1 | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-javax-websocket-server-implUpgrade jetty-ioUpgrade jetty-websocket-javadocUpgrade jetty-plusUpgrade jetty-servletUpgrade jetty-utilUpgrade jetty-websocket-clientUpgrade jetty-javax-websocket-client-implUpgrade jetty-clientUpgrade jetty-websocket-commonUpgrade jetty-fcgiUpgrade jetty-annotationsUpgrade jetty-jspUpgrade jetty-deployUpgrade jetty-antUpgrade jetty-jaasUpgrade jetty-rewriteUpgrade jetty-openidUpgrade jetty-websocket-serverUpgrade jetty-securityUpgrade jetty-proxyUpgrade jetty-serverUpgrade jetty-http-spiUpgrade jetty-quickstartUpgrade jetty-webappUpgrade jetty-startUpgrade jetty-xmlUpgrade jetty-util-ajaxUpgrade jetty-cdiUpgrade jetty-continuationUpgrade jetty-servletsUpgrade jetty-httpUpgrade jetty-websocket-servletUpgrade jetty-jndiUpgrade jetty-minimal-javadocUpgrade jetty-jmxUpgrade jetty-websocket-api | Mar 20, 2023 | Jul 7, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub