PT-2024-9612 · Eclipse +2 · Eclipse Jetty +2

🗓️ 14 Oct 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Eclipse Jetty vulnerable to DoS attacks in versions prior to 9.4.54, 10.0.18, 11.0.18, and 12.0.3.

Reporter	Title	Published	Views	Family All 260
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of jetty-server IBM webMethods BPM is vulnerable to corrupted and/or inadvertent sharing of data between requests	12 Nov 202509:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable due to Eclipse Jetty (CVE-2024-9823)	1 Apr 202503:36	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty	25 Feb 202518:09	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Eclipse Jetty, IBM Sterling Connect:Direct Web Services is affected by denial-of-service (DoS) attack.	8 Jan 202611:13	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty	15 Dec 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	28 Aug 202505:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	28 Aug 202505:55	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty Denial of Service vulnerability affects IBM Rational Functional Tester / DevOps Test UI	15 Jan 202511:46	–	ibm

Source	Link
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-7hcf-ppf8-5w5h
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/DLA-4106-1
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-9823
security-tracker	www.security-tracker.debian.org/tracker/source-package/jetty9
osv	www.osv.dev/vulnerability/DLA-4106-2
bdu	www.bdu.fstec.ru/vul/2024-11324
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2025-08602
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

05 Apr 2025 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.2 - 7.5

EPSS0.011

SSVC

eclipse jetty denial of service memory exhaustion outofmemory error security update.