In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jul 7, 2022 |
| Debian | — | Upgrade jetty9 | Aug 23, 2022 | Jul 7, 2022 |
| Jenkins 2022 09 09 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 2.363Upgrade Jenkins LTS to version 2.361.1Upgrade Jenkins to the latest version | Sep 12, 2022 | Jul 7, 2022 |
| Redhat Openshift | — | Upgrade jenkins | Jan 13, 2023 | Jul 7, 2022 |
| Suse | — | Upgrade jetty-util-ajaxUpgrade jetty-cdiUpgrade jetty-jndiUpgrade jetty-serverUpgrade jetty-quickstartUpgrade jetty-minimal-javadocUpgrade jetty-servletsUpgrade jetty-http-spiUpgrade jetty-websocket-apiUpgrade jetty-jmxUpgrade jetty-xmlUpgrade jetty-websocket-servletUpgrade jetty-webappUpgrade jetty-startUpgrade jetty-continuationUpgrade jetty-httpUpgrade jetty-javax-websocket-server-implUpgrade jetty-ioUpgrade jetty-websocket-javadocUpgrade jetty-utilUpgrade jetty-jaasUpgrade jetty-annotationsUpgrade jetty-fcgiUpgrade jetty-rewriteUpgrade jetty-antUpgrade jetty-clientUpgrade jetty-openidUpgrade jetty-jspUpgrade jetty-javax-websocket-client-implUpgrade jetty-websocket-serverUpgrade jetty-proxyUpgrade jetty-websocket-clientUpgrade jetty-securityUpgrade jetty-plusUpgrade jetty-websocket-commonUpgrade jetty-servletUpgrade jetty-deploy | Mar 20, 2023 | Jul 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub