Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-9823

Опубликовано: 14 окт. 2024
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Версия от 9.0.0 (включая) до 9.4.54 (исключая)
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Версия от 10.0.0 (включая) до 10.0.18 (исключая)
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Версия от 11.0.0 (включая) до 11.0.18 (исключая)
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Версия от 12.0.0 (включая) до 12.0.3 (исключая)
Конфигурация 2

Одновременно

cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*

EPSS

Процентиль: 73%
0.00803
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
11 месяцев назад

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.

CVSS3: 5.3
redhat
11 месяцев назад

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.

CVSS3: 5.3
debian
11 месяцев назад

There exists a security vulnerability in Jetty's DosFilter which can b ...

CVSS3: 5.3
redos
9 месяцев назад

Уязвимость jetty

CVSS3: 5.3
github
11 месяцев назад

Eclipse Jetty has a denial of service vulnerability on DosFilter

EPSS

Процентиль: 73%
0.00803
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-400