Linux Distros Unpatched Vulnerability : CVE-2017-9735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapse...

Security Bulletin: Several Security Vulnerabilities were discovered in IBM Security Directory Suite

Summary Several Security Vulnerabilities in the IBM Security Directory Integrator and Eclipse Jetty were addressed in the IBM Security Directory Suite. Vulnerability Details CVEID:CVE-2022-32759 DESCRIPTION: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0...

Security Bulletin: Multiple security vulnerabilities in Eclipse Jetty affect IBM Security Directory Integrator

Summary The IBM Security Directory Integrator was vulnerable to multiple security vulnerabilities in the Eclipse Jetty component. This was addressed in version 10 of the IBM Security Directory Integrator. Vulnerability Details CVEID:CVE-2017-9735 DESCRIPTION: Jetty could allow a remote attacker t...

Mageia: Security Advisory (MGASA-2017-0277)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries

Summary Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries Vulnerability Details Summary Resilient OnPrem v31.0 has addressed vulnerabilities in a number of dependent libraries. Vulnerability Details CVEID: CVE-2017-9735 DESCRIPTION: Jetty cou...

com.concurrentthought.cla:command-line-arguments_2.11 (0.3.0), com.github.chenchongli:storage-prototype (1.0) +101 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.13.v20130916)

org.eclipse.jetty:jetty-server MAVEN version 8.1.13.v20130916 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.concurrentthought.cla:command-line-arguments2.11 0.3.0 -...

com.jolira.enzian:app (>=1.0.1, <=1.0.12), com.jolira.enzian:tasks (>=1.0.7, <=1.0.12) +106 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.6.v20100715)

org.eclipse.jetty:jetty-server MAVEN version 7.1.6.v20100715 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira.enzian:app =1.0.1, =1.0.7, =0.9.9.5-unofficial-roberto-release, =2.6, =0.44,...

org.eclipse.jetty:jetty-ajp (7.0.0.m0), org.eclipse.jetty:jetty-annotations (7.0.0.m0) +13 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.m0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty:jetty-ajp 7.0.0.m0 - org.eclipse.jetty:jetty-annotations 7.0.0.m0 -...

org.cometd.java:cometd-java-demo (1.0.beta8), org.cometd.java:cometd-java-oort (1.0.beta8) +18 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.m1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-demo 1.0.beta8 - org.cometd.java:cometd-java-oort 1.0.beta8 -...

br.com.caelum.vraptor:vraptor-test (1.0.0), net.javacrumbs:mock-socket-http (>=0.1, <=0.6) +18 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.m2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.caelum.vraptor:vraptor-test 1.0.0 - net.javacrumbs:mock-socket-http =0.1, =0.6 -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +29 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2) +93 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.v20091005)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.v20091005 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =2.0.0 -...

edu.cmu.lti.oaqa.bio.core:baseqa (1.10.3), edu.cmu.lti.oaqa.cse:cse-framework (2.3.3) +63 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.1.v20091125)

org.eclipse.jetty:jetty-server MAVEN version 7.0.1.v20091125 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - edu.cmu.lti.oaqa.bio.core:baseqa 1.10.3 - edu.cmu.lti.oaqa.cse:cse-framework 2.3.3 -...

org.atmosphere.plugins:atmosphere-grizzly-adapter (>=0.6, <=0.6.5), org.atmosphere.samples:atmosphere-appengine-chat (>=0.6, <=0.6.5) +63 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.1.v20100517)

org.eclipse.jetty:jetty-server MAVEN version 7.1.1.v20100517 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.atmosphere.plugins:atmosphere-grizzly-adapter =0.6, =0.6, =0.6, =0.6, =0.6, =0.6, =0....

org.cometd.java:cometd-examples-java (1.1.2), org.cometd.java:cometd-java-examples (2.0.0) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.5.v20100705)

org.eclipse.jetty:jetty-server MAVEN version 7.1.5.v20100705 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.1.2 - org.cometd.java:cometd-java-examples 2.0.0 -...

com.pacificwebconsulting.core:core-microservice (>=2.0.0, <=3.0.10), com.pacificwebconsulting.runner:runner-microservice (>=1.0.0, <=1.0.2) +64 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.2.0.v20101020)

org.eclipse.jetty:jetty-server MAVEN version 7.2.0.v20101020 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.pacificwebconsulting.core:core-microservice =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.6,...

biz.neustar:browsermob-proxy (>=2.0-beta-3, <=2.0-beta-7), com.ardoq:java-api-client (0.9.6) +54 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.3.0.v20110203)

org.eclipse.jetty:jetty-server MAVEN version 7.3.0.v20110203 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - biz.neustar:browsermob-proxy =2.0-beta-3, =0.0.1, =1.0.0-beta, =2.0-beta-8, =2.1.0-beta-1...

co.freeside:betamax (1.1.2), com.fluxcorp.plugins:webservice-trigger (1.0.2) +96 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.3.1.v20110307)

org.eclipse.jetty:jetty-server MAVEN version 7.3.1.v20110307 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.freeside:betamax 1.1.2 - com.fluxcorp.plugins:webservice-trigger 1.0.2 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc1) +43 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.5.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...