CVE-2024-13009

🗓️ 08 May 2025 17:29:31Reported by eclipseType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 281 Views

CVE-2024-13009 affects Eclipse Jetty GZIP processing, risking data corruption and sharing.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: Due to use of jetty-server IBM webMethods BPM is vulnerable to corrupted and/or inadvertent sharing of data between requests	12 Nov 202509:50	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	28 Aug 202505:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	28 Aug 202505:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Eclipse affect Tivoli Netcool/OMNIbus. (CVE-2024-13009, CVE-2024-47554)	27 Nov 202513:15	–	ibm
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	28 Jan 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service (DoS), server-side request forgery (SSRF) protections, leak or corrupt request data, and security by-pass due to the use of Eclipse Jetty	6 Apr 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Improper Resource Shutdown or Release in Eclipse Jetty (CVE-2024-13009)	18 Jun 202519:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse Jetty web server library that could lead to request data corruption or leakage between sessions (CVE-2024-13009).	27 Mar 202600:47	–	ibm
IBM Security Bulletins	Security Bulletin: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body, which affects IBM watsonx.data	1 Sep 202514:53	–	ibm

NVD

Node

eclipse jettyRange9.4.0–9.4.57

[
  {
    "defaultStatus": "unaffected",
    "product": "Jetty",
    "vendor": "Eclipse Foundation",
    "versions": [
      {
        "lessThanOrEqual": "9.4.56",
        "status": "affected",
        "version": "9.4.0",
        "versionType": "semver"
      }
    ]
  }
]