com.geishatokyo.jetty:jetty-nosql-kvs (0.2.1), com.github.mg0324:mgfinal (1.0) +91 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 8.1.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.geishatokyo.jetty:jetty-nosql-kvs 0.2.1 - com.github.mg0324:mgfinal 1.0 -...

org.cometd.java:cometd-java-demo (1.0.beta8), org.cometd.java:cometd-java-oort (1.0.beta8) +18 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.0.0.m1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-demo 1.0.beta8 - org.cometd.java:cometd-java-oort 1.0.beta8 -...

com.yammer.dropwizard:dropwizard-client (0.1.0), com.yammer.dropwizard:dropwizard-core (0.1.0) +69 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.6.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.0 - com.yammer.dropwizard:dropwizard-core 0.1.0 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc2) +28 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.0.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

com.fluxcorp.plugins:webservice-trigger (1.0.3), com.github.rest-driver:rest-client-driver (>=1.1.5, <=1.1.9) +134 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.4.5.v20110725)

org.eclipse.jetty:jetty-server MAVEN version 7.4.5.v20110725 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.fluxcorp.plugins:webservice-trigger 1.0.3 - com.github.rest-driver:rest-client-driver...

com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)

org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...

by.stub:stubby4j (>=1.0.57, <=2.0.22), cn.jants:ants-core (>=1.0, <=1.1.18) +131 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.7.v20120910)

org.eclipse.jetty:jetty-server MAVEN version 8.1.7.v20120910 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - by.stub:stubby4j =1.0.57, =1.0, =1.1, =4.2.1, =4.2.1, =4.2.1, =1.0.0-release, =1.5, =1.5,...

org.cometd.java:cometd-examples-java (1.0.0rc0), org.cometd.java:cometd-java-oort (1.0.0rc0) +33 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.0.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.0rc0 - org.cometd.java:cometd-java-oort 1.0.0rc0 -...

com.jolira.enzian:app (>=1.0.1, <=1.0.12), com.jolira.enzian:tasks (>=1.0.7, <=1.0.12) +106 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.1.6.v20100715)

org.eclipse.jetty:jetty-server MAVEN version 7.1.6.v20100715 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira.enzian:app =1.0.1, =1.0.7, =0.9.9.5-unofficial-roberto-release, =2.6, =0.44,...

com.concurrentthought.cla:command-line-arguments_2.11 (0.3.0), com.github.chenchongli:storage-prototype (1.0) +101 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.13.v20130916)

org.eclipse.jetty:jetty-server MAVEN version 8.1.13.v20130916 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.concurrentthought.cla:command-line-arguments2.11 0.3.0 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.6.v20120903), org.eclipse.jetty.aggregate:jetty-all-server (7.6.6.v20120903) +51 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.6.6.v20120903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.6.v20120903 -...

ai.h2o:h2o-jetty-8 (>=3.30.0.7, <=3.46.0.12), com.alibaba.jvm.sandbox:sandbox-core (>=1.0.11, <=1.0.15) +72 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.2.0.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 8.2.0.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-jetty-8 =3.30.0.7, =1.0.11, =1.0.0, =2.0.0, =2.3.0, =1.30.4, =1.30.4,...

org.apache.asterix:asterix-app (0.8.8-incubating), org.apache.clerezza:platform.launcher.storageless (0.8-incubating) +80 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.0.0.m2)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.asterix:asterix-app 0.8.8-incubating -...

org.atmosphere.plugins:atmosphere-grizzly-adapter (>=0.6, <=0.6.5), org.atmosphere.samples:atmosphere-appengine-chat (>=0.6, <=0.6.5) +63 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.1.1.v20100517)

org.eclipse.jetty:jetty-server MAVEN version 7.1.1.v20100517 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.atmosphere.plugins:atmosphere-grizzly-adapter =0.6, =0.6, =0.6, =0.6, =0.6, =0.6, =0....

org.eclipse.jetty.aggregate:jetty-all (7.6.18.v20150929), org.eclipse.jetty.aggregate:jetty-all-server (7.6.18.v20150929) +37 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.6.18.v20150929)

org.eclipse.jetty:jetty-server MAVEN version 7.6.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.18.v20150929 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc0) +43 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.5.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

com.apiomat.helper:integration-test-helper (>=1.0.0, <=1.5.0), com.cosium.murmur.examples:vysper-embedded-war (0.8) +89 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.3.v20120416)

org.eclipse.jetty:jetty-server MAVEN version 8.1.3.v20120416 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.apiomat.helper:integration-test-helper =1.0.0, =0.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0...

Critical severity vulnerability that affects org.eclipse.jetty:jetty-server

In Eclipse Jetty, versions 9.2.x and older, 9.3.x, transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined...

com.cj.qunit.mojo:qunit-maven-plugin (>=2.0.3, <=3.0.0), com.codahale.metrics:metrics-jetty8 (>=3.0.0, <=3.0.2) +79 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.11.v20130520)

org.eclipse.jetty:jetty-server MAVEN version 8.1.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cj.qunit.mojo:qunit-maven-plugin =2.0.3, =3.0.0, =0.9.0, =3.1.0, =0.1.13, =1.0.0,...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc0) +22 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.0.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...