Eclipse Jetty Denial of Service Vulnerability (CNVD-2021-25683)

🗓️ 02 Apr 2021 00:00:00Reported by China National Vulnerability DatabaseType

Eclipse Jetty vulnerability leads to Denial of Service due to invalid TLS frame processing.

Reporter	Title	Published	Views	Family All 138
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to multiple Eclipse Jetty issues	24 Jun 202216:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (CVE-2021-28165)	1 Feb 202321:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: A CVE-2021-28165 vulnerability in Eclipse Jetty affects IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow	12 Apr 202321:48	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	29 Mar 202206:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Eclipse Jetty affect IBM Security Directory Integrator	15 May 202400:45	–	ibm

Vulners

Node

eclipse jettyRange7.2.2–9.4.38

eclipse jetty_alpha0Range10.0.0.–10.0.1

eclipse jetty_alpha0Range11.0.0.–11.0.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-28165

05 Apr 2021 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

CVSS 27.8

EPSS0.53861

SSVC