In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins LTS to version 2.361.1Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest versionUpgrade Jenkins to version 2.363 | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-util-ajaxUpgrade jetty-webappUpgrade jetty-websocket-servletUpgrade jetty-xmlUpgrade jetty-continuationUpgrade jetty-httpUpgrade jetty-servletsUpgrade jetty-quickstartUpgrade jetty-http-spiUpgrade jetty-serverUpgrade jetty-startUpgrade jetty-cdiUpgrade jetty-jndiUpgrade jetty-websocket-apiUpgrade jetty-jmxUpgrade jetty-minimal-javadocUpgrade jetty-plusUpgrade jetty-proxyUpgrade jetty-websocket-clientUpgrade jetty-websocket-serverUpgrade jetty-utilUpgrade jetty-jaasUpgrade jetty-openidUpgrade jetty-fcgiUpgrade jetty-antUpgrade jetty-rewriteUpgrade jetty-ioUpgrade jetty-servletUpgrade jetty-websocket-javadocUpgrade jetty-websocket-commonUpgrade jetty-securityUpgrade jetty-deployUpgrade jetty-clientUpgrade jetty-jspUpgrade jetty-javax-websocket-client-implUpgrade jetty-javax-websocket-server-implUpgrade jetty-annotations | Mar 20, 2023 | Jul 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub