Linux Distros Unpatched Vulnerability : CVE-2017-9735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapse...

Security Bulletin: Several Security Vulnerabilities were discovered in IBM Security Directory Suite

Summary Several Security Vulnerabilities in the IBM Security Directory Integrator and Eclipse Jetty were addressed in the IBM Security Directory Suite. Vulnerability Details CVEID:CVE-2022-32759 DESCRIPTION: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0...

Security Bulletin: Multiple security vulnerabilities in Eclipse Jetty affect IBM Security Directory Integrator

Summary The IBM Security Directory Integrator was vulnerable to multiple security vulnerabilities in the Eclipse Jetty component. This was addressed in version 10 of the IBM Security Directory Integrator. Vulnerability Details CVEID:CVE-2017-9735 DESCRIPTION: Jetty could allow a remote attacker t...

Mageia: Security Advisory (MGASA-2017-0277)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries

Summary Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries Vulnerability Details Summary Resilient OnPrem v31.0 has addressed vulnerabilities in a number of dependent libraries. Vulnerability Details CVEID: CVE-2017-9735 DESCRIPTION: Jetty cou...

com.bbn.adept:adept-api (>=2.7.3, <=2.7.4), com.bbn.adept:adept-kb (>=2.7.3, <=2.7.4) +127 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.9.v20130131)

org.eclipse.jetty:jetty-server MAVEN version 8.1.9.v20130131 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.bbn.adept:adept-api =2.7.3, =2.7.3, =2.7.3, =0.52, =2.2.0, =1.0.0, =1.0.3 and more...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.v20100505), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.v20100505) +34 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.0.v20100505)

org.eclipse.jetty:jetty-server MAVEN version 7.1.0.v20100505 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.v20100505 -...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +1424 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.3.0.v20150612, <=9.3.19.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.3.0.v20150612, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...

org.eclipse.jetty.aggregate:jetty-all (7.6.6.v20120903), org.eclipse.jetty.aggregate:jetty-all-server (7.6.6.v20120903) +51 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.6.v20120903)

org.eclipse.jetty:jetty-server MAVEN version 7.6.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.6.v20120903 -...

io.restx:restx-server-jetty7 (>=0.35-rc1, <=0.35.1), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.6.8, <=1.8.2) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 7.6.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - io.restx:restx-server-jetty7 =0.35-rc1, =1.6.8, =1.8.3, =1.9.4 -...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2) +93 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.v20091005)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.v20091005 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =2.0.0 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +36 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.20.v20160902)

org.eclipse.jetty:jetty-server MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

org.atmosphere.plugins:atmosphere-grizzly-adapter (>=0.6, <=0.6.5), org.atmosphere.samples:atmosphere-appengine-chat (>=0.6, <=0.6.5) +63 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.1.v20100517)

org.eclipse.jetty:jetty-server MAVEN version 7.1.1.v20100517 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.atmosphere.plugins:atmosphere-grizzly-adapter =0.6, =0.6, =0.6, =0.6, =0.6, =0.6, =0....

com.github.jep42:robotframework-easycsvmap-remoteserver (>=0.0.2, <=0.0.5), com.github.jep42:robotframework-formatcompare-remoteserver (>=0.0.2, <=0.0.3) +63 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.3.v20120416)

org.eclipse.jetty:jetty-server MAVEN version 7.6.3.v20120416 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.jep42:robotframework-easycsvmap-remoteserver =0.0.2, =0.0.2, =2.0-beta, =0.18,...

com.cognifide.aet:w3chtml5validator (>=2.0.0-rc2, <=2.1.3), com.ganshane.lichen:lichen-creeper (>=0.5.9, <=0.5.10.2) +179 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.9.v20130131)

org.eclipse.jetty:jetty-server MAVEN version 7.6.9.v20130131 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cognifide.aet:w3chtml5validator =2.0.0-rc2, =0.5.9, =0.5.9, =0.5.9, =0.8.0, =0.3.0,...

com.data-artisans:cascading-flink (0.1), com.github.hirofumi:xgboost4j-flink_2.11 (>=0.7.0-p1, <=0.80-p1) +126 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.m1)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.data-artisans:cascading-flink 0.1 - com.github.hirofumi:xgboost4j-flink2.11 =0.7.0-p1,...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: GHSA-WFCC-PFF6-RGC5...

org.cometd.java:cometd-examples-java (1.1.2), org.cometd.java:cometd-java-examples (2.0.0) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.5.v20100705)

org.eclipse.jetty:jetty-server MAVEN version 7.1.5.v20100705 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.1.2 - org.cometd.java:cometd-java-examples 2.0.0 -...

com.bacoder.jgit:org.eclipse.jgit.junit.http (>=3.1.0-201308312337-r, <=3.1.0-201309071158-r), org.apache.tapestry:tapestry-runner (>=5.4-beta-3, <=5.4.5) +57 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.11.v20130520)

org.eclipse.jetty:jetty-server MAVEN version 7.6.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.bacoder.jgit:org.eclipse.jgit.junit.http =3.1.0-201308312337-r, =5.4-beta-3,...

com.jolira.enzian:app (>=1.0.1, <=1.0.12), com.jolira.enzian:tasks (>=1.0.7, <=1.0.12) +106 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.6.v20100715)

org.eclipse.jetty:jetty-server MAVEN version 7.1.6.v20100715 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira.enzian:app =1.0.1, =1.0.7, =0.9.9.5-unofficial-roberto-release, =2.6, =0.44,...