DeutschShown in its original language — a full translation is planned for a future version.
Eclipse Jetty: Mehrere Schwachstellen
view advisory published 2024-10-14
Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff zu erzeugen und Daten zu manipulieren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8184US | medium6.5 | — | ||
There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By rep… | ||||
| CVE-2024-6763US | medium5.3 | — | ||
Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing.
The HttpURI class does insuf… | ||||
| CVE-2024-6762US | medium6.5 | — | ||
Jetty PushSessionCacheFilter can be exploited by unauthenticated users
to launch remote DoS attacks by exhausting the server’s memory. | ||||
| CVE-2024-9823US | high7.5 | — | ||
There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:11023 vom 2024-12-12external
- Red Hat Security Advisory RHSA-2024:9571 vom 2024-11-13external
- Red Hat Security Advisory RHSA-2025:12511 vom 2025-08-03external
- Red Hat Security Advisory RHSA-2025:2416 vom 2025-03-05external
- Red Hat Security Advisory RHSA-2025:9922 vom 2025-06-30external
- Amazon Linux Security Advisory ALAS-2024-2702 vom 2024-12-20external
- SolarWinds Platform 2025.4.1 release notes vom 2025-11-18external
- GitHub Advisory vom 2024-10-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan