The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 2.363Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 2.361.1 | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-javax-websocket-client-implUpgrade jetty-ioUpgrade jetty-antUpgrade jetty-jaasUpgrade jetty-websocket-clientUpgrade jetty-websocket-serverUpgrade jetty-deployUpgrade jetty-proxyUpgrade jetty-utilUpgrade jetty-servletUpgrade jetty-websocket-commonUpgrade jetty-openidUpgrade jetty-javax-websocket-server-implUpgrade jetty-websocket-javadocUpgrade jetty-plusUpgrade jetty-clientUpgrade jetty-jspUpgrade jetty-securityUpgrade jetty-annotationsUpgrade jetty-fcgiUpgrade jetty-rewriteUpgrade jetty-cdiUpgrade jetty-webappUpgrade jetty-startUpgrade jetty-quickstartUpgrade jetty-jndiUpgrade jetty-continuationUpgrade jetty-serverUpgrade jetty-websocket-apiUpgrade jetty-jmxUpgrade jetty-websocket-servletUpgrade jetty-minimal-javadocUpgrade jetty-util-ajaxUpgrade jetty-servletsUpgrade jetty-httpUpgrade jetty-http-spiUpgrade jetty-xml | Mar 20, 2023 | Jul 7, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub