Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.153231
Category:Web Servers
Title:Eclipse Jetty DoS Vulnerability (GHSA-7hcf-ppf8-5w5h) - Windows
Summary:Eclipse Jetty is prone to a denial of service (DoS); vulnerability.
Description:Summary:
Eclipse Jetty is prone to a denial of service (DoS)
vulnerability.

Vulnerability Insight:
There exists a security vulnerability in Jetty's DosFilter
which can be exploited by unauthorized users to cause remote denial of service (DoS) attack on
the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger
OutofMemory errors and exhaust the server's memory finally.

Affected Software/OS:
Eclipse Jetty version 9.0.0 through 9.4.53, 10.0.0 through
10.0.17, 11.0.0 through 11.0.17 and 12.0.0 through 12.0.2.

Solution:
Update to version 9.4.54, 10.0.18, 11.0.18, 12.0.3 or later.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2024-9823
CopyrightCopyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.