DOS vulnerability for Quoted Quality CSV headers

🗓️ 10 Mar 2021 03:46:47Reported by GitHub Advisory DatabaseType

A Denial of Service vulnerability in Jetty due to handling large number of "quality" parameters in request headers could lead to high CPU usage, triggering a DoS state

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-27223 when Jetty handles a request containing multiple Accept headers the server may enter a denial of service (DoS) state	30 Jul 202105:03	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	11 Mar 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (CVE-2020-27223,CVE-2021-28169)	1 Feb 202321:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities - Eclipse Jetty ( CVE-2021-28163, CVE-2021-28165, CVE-2020-27223)	14 Jul 202118:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities were detected in IBM Secure Proxy	30 Jul 202105:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	19 Apr 202407:11	–	ibm

Vulners

Node

org.eclipse.jetty jetty-servermaven

org.eclipse.jetty jetty-serverRange9.4.6–9.4.37maven

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-m394-8rww-3jr7
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-27223
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi
lists	www.lists.apache.org/thread.html/r0b639bd9bfaea265022125d18acd2fc6456044b76609ec74772c9567@%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r0cdab13815fc419805a332278c8d27e354e78560944fc36db0bdc760@%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r0e25cdf3722a24c53049d37396f0da8502cb4b7cdc481650dc601dbc@%3Cgitbox.activemq.apache.org%3E
lists	www.lists.apache.org/thread.html/r1b7ed296a865e3f1337a96ee9cd51f6d154d881a30da36020ca72a4b@%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r26d9196f4d2afb9bec2784bcb6fc183aca82e4119bf41bdc613eec01@%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r2c2c7b2971360fb946bbf062c58d7245927dd1ce9150fc9987f65409@%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r35ab810c0f3016b3fd3a3fa9088a2d2781b354a810780ce74d022b6c@%3Cdev.kafka.apache.org%3E

01 Feb 2023 05:05Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

CVSS 3.15.2 - 5.3

EPSS0.33816

CWE-400