Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkinsUpgrade jenkins-lts | Jan 30, 2020 | Jan 29, 2020 |
| Jenkins 2020 01 29 | — | Upgrade Jenkins to version 2.219Upgrade Jenkins LTS to version 2.204.2Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest version | Jan 30, 2020 | Jan 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-consoleUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-deschedulerUpgrade cri-oUpgrade openshift-enterprise-autohealUpgrade jenkinsUpgrade atomic-openshift-dockerregistryUpgrade golang-github-prometheus-alertmanagerUpgrade jenkins-2-pluginsUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-service-idlerUpgrade openshift-kuryrUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-metrics-serverUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshiftUpgrade openshift-ansibleUpgrade golang-github-openshift-oauth-proxy | Mar 18, 2020 | Jan 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub