DeutschShown in its original language — a full translation is planned for a future version.
Eclipse Jetty: Mehrere Schwachstellen
view advisory published 2025-05-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um Daten zu manipulieren oder einen Denial-of-Service auszulösen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-1948US | — | — | ||
In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE.
The Jetty HTT… | ||||
| CVE-2024-13009US | — | — | ||
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request
body. This can result in corrupted and/or… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2025:10092 vom 2025-07-01external
- Red Hat Security Advisory RHSA-2025:10097 vom 2025-07-01external
- Red Hat Security Advisory RHSA-2025:10098 vom 2025-07-01external
- Red Hat Security Advisory RHSA-2025:10104 vom 2025-07-01external
- Red Hat Security Advisory RHSA-2025:10118 vom 2025-07-01external
- Red Hat Security Advisory RHSA-2025:10119 vom 2025-07-01external
- Red Hat Security Advisory RHSA-2025:10120 vom 2025-07-02external
- Red Hat Security Advisory RHSA-2025:12511 vom 2025-08-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan