Lucene search
Gentoo FoundationMGASA-2017-0277HistoryAug 18, 2017 - 8:06 p.m.
Updated jetty packages fix security vulnerability
2017-08-1820:06:49
Gentoo Foundation
advisories.mageia.org
10
0.003 Low
EPSS
Percentile
69.4%
Jetty is prone to a timing channel attack in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords (CVE-2017-9735).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 6 | noarch | jetty | < 9.4.6-1.v20170531.1.1 | jetty-9.4.6-1.v20170531.1.1.mga6 |
| Mageia | 6 | noarch | jetty-alpn | < 8.1.11-3.v20170118.1 | jetty-alpn-8.1.11-3.v20170118.1.mga6 |
| Mageia | 6 | noarch | jetty-test-helper | < 3.1-4 | jetty-test-helper-3.1-4.mga6 |
Related
ibm
ibm
fedora
fedora
[SECURITY] Fedora 25 Update: jetty-alpn-8.1.11-2.v20170118.fc25
2017-07-08 22:21:57
[SECURITY] Fedora 26 Update: jetty-9.4.6-1.v20170531.fc26
2017-07-07 23:21:06
[SECURITY] Fedora 25 Update: jetty-9.4.6-1.v20170531.fc25
2017-07-08 22:21:57
veracode
veracode
Timing Attack
2017-05-18 03:03:41
osv
osv
CVE-2017-9735
2017-06-16 21:29:00
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
2018-10-19 16:15:46
jetty - security update
2017-07-09 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1021-1)
2018-02-04 00:00:00
Jetty < 9.4.6.20170531 Security Bypass Vulnerability - Windows
2017-08-01 00:00:00
Fedora Update for jetty FEDORA-2017-1206f87545
2017-07-14 00:00:00
atlassian
atlassian
nessus
nessus
Fedora 26 : jetty (2017-4e2312892e)
2017-07-17 00:00:00
Fedora 24 : jetty (2017-1206f87545)
2017-07-13 00:00:00
Debian DLA-1020-1 : jetty security update
2017-07-10 00:00:00
redhatcve
redhatcve
CVE-2017-9735
2017-06-22 14:50:17
debian
debian
[SECURITY] [DLA 1020-1] jetty security update
2017-07-09 22:50:11
[SECURITY] [DLA 1021-1] jetty8 security update
2017-07-11 11:03:07
[SECURITY] [DLA 2661-1] jetty9 security update
2021-05-14 13:29:10
debiancve
debiancve
CVE-2017-9735
2017-06-16 21:29:00
cvelist
cvelist
CVE-2017-9735
2017-06-16 21:00:00
prion
prion
Design/Logic Flaw
2017-06-16 21:29:00
ubuntucve
ubuntucve
CVE-2017-9735
2017-06-16 00:00:00
cve
cve
CVE-2017-9735
2017-06-16 21:29:00
github
github
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00