Remote Denial Of Service (DoS)

🗓️ 22 Oct 2024 05:42:43Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

Jetty server vulnerable to Remote Denial of Service due to unauthorized crafted requests causing memory issues.

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Eclipse Jetty, IBM Sterling Connect:Direct Web Services is affected by denial-of-service (DoS) attack.	8 Jan 202611:13	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty	15 Dec 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jetty-server-9.4.53.v20231009.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-6763)	1 Apr 202510:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM EntireX through the use of webMethods Integration Server.	6 Jan 202612:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Eclipse Jetty, e2fsprogs, dnsjava , Apache Commons IO, Apache HTTP Server and Java SE affect IBM Cloud Object Storage Systems (Dec 2024)	4 Feb 202501:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2025 - Multiple CVEs addressed	7 May 202520:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server	21 Jul 202514:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities reported in Jetty server (CVE-2024-8184, CVE-2024-6763)	10 Apr 202514:14	–	ibm

Vulners

Node

jetty9 jetty9Match9.4.33-1debian

AND

jetty9 jetty9Match9.4.38-1debian

AND

debian debian_linuxMatch999

eclipse jetty-serverRange9.3.12.v20160915–9.4.55.v20240627java

eclipse jetty-serverRange11.0.0-alpha0–11.0.23java

eclipse jetty-serverRange10.0.0-alpha0–10.0.23java

eclipse jetty-serverRange12.0.0.alpha0–12.0.8java

Source	Link
github	www.github.com/jetty/jetty.project/pull/11723
github	www.github.com/jetty/jetty.project/pull/11723/commits/b6fb0a8315059c7a09490621929f85a0291b086b
github	www.github.com/advisories/GHSA-g8m5-722r-8whq
github	www.github.com/jetty/jetty.project/security/advisories/GHSA-g8m5-722r-8whq
gitlab	www.gitlab.eclipse.org/security/cve-assignement/-/issues/30

09 Nov 2024 00:57Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.9 - 6.5

EPSS0.011

SSVC