Количество 8
Количество 8
GHSA-rggv-cv7r-mw98
Connection leaking on idle timeout when TCP congested
CVE-2024-22201
Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6.
CVE-2024-22201
Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6.
CVE-2024-22201
Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6.
CVE-2024-22201
Jetty is a Java based web server and servlet engine. An HTTP/2 SSL con ...
SUSE-SU-2024:0817-1
Security update for jetty-minimal
BDU:2024-03239
Уязвимость контейнера сервлетов Eclipse Jetty, связанная с неконтролируемым потреблением ресурсов, позволяющая нарушителю ограничить сервер на принятие новые соединения от действительных клиентов
ROS-20240422-03
Уязвимость Jetty
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-rggv-cv7r-mw98 Connection leaking on idle timeout when TCP congested | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-22201 Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6. | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-22201 Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6. | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-22201 Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6. | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
| CVE-2024-22201 Jetty is a Java based web server and servlet engine. An HTTP/2 SSL con ... | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:0817-1 Security update for jetty-minimal | 1% Низкий | больше 2 лет назад | |
 | BDU:2024-03239 Уязвимость контейнера сервлетов Eclipse Jetty, связанная с неконтролируемым потреблением ресурсов, позволяющая нарушителю ограничить сервер на принятие новые соединения от действительных клиентов | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
 | ROS-20240422-03 Уязвимость Jetty | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу