Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests

🗓️ 22 Jul 2026 22:58:29Reported by GitHub Advisory DatabaseType

Impact The original report: Server handling of 100-Continue requests can lead to memory leak that can be abused to cause a Denial of Service state. After investigation, turns out that every request that has a body, but reading the body may end up ...

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2024-7708	14 Jul 202609:01	–	attackerkb
Circl	CVE-2024-7708	20 Jul 202605:47	–	circl
CVE	CVE-2024-7708	14 Jul 202609:01	–	cve
Cvelist	CVE-2024-7708	14 Jul 202609:01	–	cvelist
EUVD	EUVD-2024-55651	22 Jul 202622:58	–	euvd
NVD	CVE-2024-7708	14 Jul 202609:16	–	nvd
OSV	CVE-2024-7708	14 Jul 202609:01	–	osv
OSV	GHSA-9299-C6M4-MJHC Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests	22 Jul 202622:58	–	osv
OSV	UBUNTU-CVE-2024-7708	14 Jul 202609:16	–	osv
Positive Technologies	PT-2026-57981	14 Jul 202600:00	–	ptsecurity

Vulners

Node

org.eclipse.jetty jetty-serverRange11.0.7–11.0.23maven

org.eclipse.jetty jetty-serverRange10.0.7–10.0.23maven

Source	Link
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-9299-c6m4-mjhc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-7708
github	www.github.com/jetty/jetty.project/pull/12156
github	www.github.com/jetty/jetty.project/commit/8259eabbc70ae7fc2d525f1e95b43fbdfd2ad097
github	www.github.com/jetty/jetty.project/releases/tag/jetty-10.0.23
github	www.github.com/jetty/jetty.project/releases/tag/jetty-11.0.23
gitlab	www.gitlab.eclipse.org/security/cve-assignment/-/work_items/29
github	www.github.com/advisories/GHSA-9299-c6m4-mjhc

22 Jul 2026 22:58Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.17.5

EPSS0.00252

SSVC