Buffer corruption in bundled Jetty

🗓️ 17 Aug 2020 00:00:00Reported by Jenkins Security TeamType

Jenkins bundles Jetty with Winstone; affected builds 2.224–2.242 and 2.222.1–2.235.4 on CVE-2019-17638; fixed in 2.235.5 and 2.243.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: CVE-2019-17638 jetty double-release of a byte buffer	18 Nov 202020:33	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerability found by vFinder in IBM eDiscovery Analyzer	15 Sep 202019:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affects IBM InfoSphere Information Server	1 Apr 202120:09	–	ibm
IBM Security Bulletins	Security Bulletin: i2 Analyze has an information disclosure vulnerability (CVE-2019-17638)	29 Jul 202107:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a vulnerability in Eclipse Jetty (CVE-2019-17638)	23 Dec 202013:52	–	ibm
FreeBSD	jenkins -- Buffer corruption in bundled Jetty	17 Aug 202000:00	–	freebsd
BDU FSTEC	The vulnerability of Eclipse Jetty servlet containers, related to duplicate resource operations, allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.	17 Nov 202000:00	–	bdu_fstec
Broadcom	Statement on Jetty vulnerabilities in Brocade SANav	1 May 202400:00	–	broadcom