In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins LTS to version 2.361.1Upgrade Jenkins to version 2.363Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest version | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-fcgiUpgrade jetty-securityUpgrade jetty-plusUpgrade jetty-javax-websocket-client-implUpgrade jetty-jspUpgrade jetty-javax-websocket-server-implUpgrade jetty-websocket-commonUpgrade jetty-websocket-javadocUpgrade jetty-clientUpgrade jetty-websocket-serverUpgrade jetty-proxyUpgrade jetty-ioUpgrade jetty-utilUpgrade jetty-servletUpgrade jetty-rewriteUpgrade jetty-deployUpgrade jetty-jaasUpgrade jetty-openidUpgrade jetty-annotationsUpgrade jetty-websocket-clientUpgrade jetty-antUpgrade jetty-continuationUpgrade jetty-cdiUpgrade jetty-servletsUpgrade jetty-websocket-servletUpgrade jetty-http-spiUpgrade jetty-minimal-javadocUpgrade jetty-xmlUpgrade jetty-util-ajaxUpgrade jetty-jmxUpgrade jetty-webappUpgrade jetty-httpUpgrade jetty-quickstartUpgrade jetty-startUpgrade jetty-websocket-apiUpgrade jetty-serverUpgrade jetty-jndi | Mar 20, 2023 | Jul 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub