In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins to version 2.363Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 2.361.1Upgrade Jenkins LTS to the latest version | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-util-ajaxUpgrade jetty-servletsUpgrade jetty-httpUpgrade jetty-minimal-javadocUpgrade jetty-cdiUpgrade jetty-webappUpgrade jetty-websocket-apiUpgrade jetty-http-spiUpgrade jetty-xmlUpgrade jetty-websocket-servletUpgrade jetty-jndiUpgrade jetty-serverUpgrade jetty-continuationUpgrade jetty-jmxUpgrade jetty-startUpgrade jetty-quickstartUpgrade jetty-openidUpgrade jetty-annotationsUpgrade jetty-jaasUpgrade jetty-fcgiUpgrade jetty-plusUpgrade jetty-utilUpgrade jetty-javax-websocket-client-implUpgrade jetty-websocket-javadocUpgrade jetty-websocket-commonUpgrade jetty-antUpgrade jetty-clientUpgrade jetty-jspUpgrade jetty-javax-websocket-server-implUpgrade jetty-securityUpgrade jetty-ioUpgrade jetty-deployUpgrade jetty-servletUpgrade jetty-proxyUpgrade jetty-websocket-clientUpgrade jetty-websocket-serverUpgrade jetty-rewrite | Mar 20, 2023 | Jul 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub