Lucene search
+L

7 matches found

OSV
OSV
added 2026/09/07 11:17 a.m.0 views

DEBIAN-CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/07 11:17 a.m.2 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/07 10:19 a.m.11 views

CVE-2026-19204

Eclipse Jetty is vulnerable in its WebSocket component when auto-fragmentation is enabled. A remote, unauthenticated client can send a WebSocket frame with an unknown opcode and a very large declared payload length. Because unknown opcodes bypass the normal maximum frame size handling and payload...

8.7CVSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/07 10:19 a.m.4 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS
SaveExploits0
EUVD
EUVD
added 2026/09/07 10:19 a.m.4 views

EUVD-2026-72335

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/07 10:19 a.m.29 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.4 views

PT-2026-86673

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS
SaveExploits0References2
Rows per page
Query Builder