Описание
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.
A flaw was found in Eclipse Open9J and JITServer. A remote attacker, without needing to authenticate, can send a specially crafted 32-byte TCP message to JITServer. This action can cause JITServer to crash, leading to a Denial of Service (DoS) for affected systems.
Дополнительная информация
Статус:
Important
Дефект:
CWE-1286
https://bugzilla.redhat.com/show_bug.cgi?id=2466741Eclipse Open9J: Denial of Service in JITServer via crafted TCP message
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
ubuntu
3 месяца назад
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.
CVSS3: 7.5
nvd
3 месяца назад
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.
7.5 High
CVSS3