Lucene search

jenkins -- HTTP/2 denial of service vulnerability in bundled Jetty

🗓️ 20 Mar 2024 00:00:00Reported by FreeBSDType

HTTP/2 denial of service vulnerability in Jetty bundled with Jenkins

Reporter	Title	Published	Views	Family All 74
Tenable Nessus	Jenkins LTS < 2.440.2 / Jenkins weekly < 2.444	20 Mar 202400:00	–	nessus
Tenable Nessus	Debian dla-3780 : jetty9 - security update	6 Apr 202400:00	–	nessus
Tenable Nessus	Debian dsa-5664 : jetty9 - security update	18 Apr 202400:00	–	nessus
Tenable Nessus	FreeBSD : jenkins -- HTTP/2 denial of service vulnerability in bundled Jetty (2e3bea0c-f110-11ee-bc57-00e081b7aa2d)	3 Apr 202400:00	–	nessus
Tenable Nessus	IBM MQ 9.0 <= 9.0.0.26 / 9.1 <= 9.1.0.22 / 9.2 <= 9.2.0.26 / 9.3 < 9.4 CD (7158057)	27 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jetty-minimal (SUSE-SU-2024:0817-1)	9 Mar 202400:00	–	nessus
Tenable Nessus	Oracle Coherence (Jul 2024 CPU)	19 Jul 202400:00	–	nessus
Tenable Nessus	Oracle Enterprise Manager Cloud Control (October 2024 CPU)	17 Oct 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Product OCP Tools 4.13 OpenShift Jenkins (RHSA-2024:3636)	5 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Product OCP Tools 4.12 Openshift Jenkins (RHSA-2024:3635)	5 Jun 202400:00	–	nessus

Source	Link
jenkins	www.jenkins.io/security/advisory/2024-03-20/

OS	OS Version	Architecture	Package	Package Version	Filename
FreeBSD	any	noarch	jenkins	2.444	UNKNOWN
FreeBSD	any	noarch	jenkins-lts	2.440.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Mar 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS37.5

EPSS0.02816

SSVC