Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.153229
Category:Web Servers
Title:Eclipse Jetty DoS Vulnerability (GHSA-g8m5-722r-8whq) - Windows
Summary:Eclipse Jetty is prone to a denial of service (DoS); vulnerability.
Description:Summary:
Eclipse Jetty is prone to a denial of service (DoS)
vulnerability.

Vulnerability Insight:
There exists a security vulnerability in Jetty's
ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote
denial of service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger
OutofMemory errors and exhaust the server's memory.

Affected Software/OS:
Eclipse Jetty version 9.3.12 through 9.4.55, 10.0.0 through
10.0.23, 11.0.0 through 11.0.23 and 12.0.0 through 12.0.8.

Solution:
Update to version 9.4.56, 10.0.24, 11.0.24, 12.0.9 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:L/Au:S/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2024-8184
CopyrightCopyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.