Eclipse Jetty 安全漏洞

🗓️ 14 Oct 2024 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Eclipse Jetty has a remote denial of service vulnerability causing memory overflow.

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Eclipse Jetty, IBM Sterling Connect:Direct Web Services is affected by denial-of-service (DoS) attack.	8 Jan 202611:13	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty	15 Dec 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jetty-server-9.4.53.v20231009.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-6763)	1 Apr 202510:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM EntireX through the use of webMethods Integration Server.	6 Jan 202612:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Eclipse Jetty, e2fsprogs, dnsjava , Apache Commons IO, Apache HTTP Server and Java SE affect IBM Cloud Object Storage Systems (Dec 2024)	4 Feb 202501:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2025 - Multiple CVEs addressed	7 May 202520:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server	21 Jul 202514:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities reported in Jetty server (CVE-2024-8184, CVE-2024-6763)	10 Apr 202514:14	–	ibm

Source	Link
github	www.github.com/jetty/jetty.project/pull/11723
gitlab	www.gitlab.eclipse.org/security/cve-assignement/-/issues/30
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-g8m5-722r-8whq
oracle	www.oracle.com/security-alerts/cpujul2025.html
cxsecurity	www.cxsecurity.com/cveshow/CVE-2024-8184/
access	www.access.redhat.com/security/cve/cve-2024-8184
vigilance	www.vigilance.fr/vulnerability/Jetty-denial-of-service-via-ThreadLimitHandler-getRemote-45381

31 Dec 2025 00:00Current

7High risk

Vulners AI Score7

CVSS 3.15.9 - 6.5

EPSS0.0103

SSVC

Eclipse Jetty remote denial memory overflow security vulnerability Jetty server