Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkinsUpgrade jenkins-lts | Jan 30, 2020 | Jan 29, 2020 |
| Jenkins 2020 01 29 | — | Upgrade Jenkins to version 2.219Upgrade Jenkins LTS to version 2.204.2Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest version | Jan 30, 2020 | Jan 29, 2020 |
| Redhat Openshift | — | Upgrade jenkinsUpgrade atomic-openshift-web-consoleUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-deschedulerUpgrade cri-oUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-node-problem-detectorUpgrade openshift-kuryrUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshiftUpgrade atomic-enterprise-service-catalogUpgrade openshift-ansibleUpgrade golang-github-prometheus-node_exporterUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-openshift-metrics-serverUpgrade jenkins-2-pluginsUpgrade golang-github-prometheus-alertmanagerUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-service-idler | Mar 18, 2020 | Jan 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub