In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins to version 2.363Upgrade Jenkins LTS to version 2.361.1Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest version | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-webappUpgrade jetty-websocket-servletUpgrade jetty-servletsUpgrade jetty-httpUpgrade jetty-http-spiUpgrade jetty-quickstartUpgrade jetty-minimal-javadocUpgrade jetty-websocket-apiUpgrade jetty-jndiUpgrade jetty-cdiUpgrade jetty-startUpgrade jetty-util-ajaxUpgrade jetty-jmxUpgrade jetty-serverUpgrade jetty-xmlUpgrade jetty-continuationUpgrade jetty-utilUpgrade jetty-antUpgrade jetty-plusUpgrade jetty-annotationsUpgrade jetty-clientUpgrade jetty-ioUpgrade jetty-javax-websocket-server-implUpgrade jetty-javax-websocket-client-implUpgrade jetty-websocket-serverUpgrade jetty-websocket-javadocUpgrade jetty-securityUpgrade jetty-websocket-commonUpgrade jetty-websocket-clientUpgrade jetty-proxyUpgrade jetty-servletUpgrade jetty-deployUpgrade jetty-jspUpgrade jetty-jaasUpgrade jetty-rewriteUpgrade jetty-openidUpgrade jetty-fcgi | Mar 20, 2023 | Jul 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub