Denial Of Service (DOS)

🗓️ 20 Apr 2023 14:24:08Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

Jetty server vulnerability denial of service

Reporter	Title	Published	Views	Family All 134
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	7 Jun 202406:01	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Mobile Enterprise Gateway and VPN Module affected by multiple vulnerabilities	29 Sep 202322:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in its dependencies (CVE-2022-45688, CVE-2023-28439, CVE-2023-33201, CVE-2023-41900, CVE-2023-36479, CVE-2023-40167, CVE-2023-36478, )	24 Mar 202514:16	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jetty-server-9.4.48.v20220622.jar used by IBM Maximo Asset Management application (CVE-2023-26048)	6 Nov 202312:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in Apache Solr and Apache Zookeeper shipped with IBM Operations Analytics - Log Analysis (CVE-2023-26048)	15 Mar 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty-server affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0)[CVE-2023-26048]	6 Mar 202406:13	–	ibm
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	17 Oct 202515:07	–	ibm

Vulners

Node

jetty9 jetty9Match9.4.36-1debian

AND

jetty9 jetty9Match9.4.33-1debian

AND

debian debian_linuxMatch11

jetty9 jetty9Match9.4.15-1debian

AND

jetty9 jetty9Match9.4.16-0+deb10u1debian

AND

debian debian_linuxMatch10

jetty9 jetty9Match9.4.38-1debian

AND

jetty9 jetty9Match9.4.33-1debian

AND

debian debian_linuxMatch999

eclipse jetty-serverRange7.6.0.RC1–9.4.50.v20221201java

eclipse jetty-serverRange10.0.0-alpha0–10.0.13java

eclipse jetty-serverRange11.0.0-alpha0–11.0.13java

eclipse jetty-serverRange12.0.0.alpha0–12.0.0.alpha3java

eclipse jetty-httpRange9.4.10.RC0–9.4.50.v20221201java

eclipse jetty-httpRange10.0.0-alpha0–10.0.13java

eclipse jetty-httpRange12.0.0.alpha0–12.0.0.alpha3java

eclipse jetty-httpRange11.0.0-alpha0–11.0.13java

eclipse jetty-utilRange7.6.0.RC1–9.4.50.v20221201java

eclipse jetty-utilRange10.0.0-alpha0–10.0.13java

eclipse jetty-utilRange11.0.0-alpha0–11.0.13java

eclipse jetty-utilRange12.0.0.alpha0–12.0.0.alpha3java

Source	Link
github	www.github.com/eclipse/jetty.project/commit/1bb928bbf0e42b5dca4b89b01b78cb437ce52f7f
github	www.github.com/eclipse/jetty.project/commit/3259a55ce39354dc4686a7d345b7cb49a5c79158
github	www.github.com/eclipse/jetty.project/commit/1042cdb8a54e86c14e593ce6f69072a88bcac393
github	www.github.com/advisories/GHSA-qw69-rqj8-6qw8
github	www.github.com/eclipse/jetty.project/issues/9076
github	www.github.com/eclipse/jetty.project/pull/9344
github	www.github.com/eclipse/jetty.project/pull/9345
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8
github	www.github.com/jakartaee/servlet/blob/6.0.0/spec/src/main/asciidoc/servlet-spec-body.adoc
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00039.html

30 Sep 2023 17:03Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.3

EPSS0.41634

SSVC