jetty: buffer not correctly recycled in Gzip Request inflation
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| The Eclipse Foundation | Eclipse Jetty | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
Configuration 5 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat AMQ 7.8.1 | |||
| jetty | cpe:/a:redhat:amq_broker:7 | RHSA-2021:0417 | 2021-02-04T00:00:00Z |
| Red Hat AMQ LTS 7.4.6 | |||
| jetty | cpe:/a:redhat:amq_broker:7 | RHSA-2021:0329 | 2021-02-02T00:00:00Z |
| Red Hat Fuse 7.10 | |||
| jetty | cpe:/a:redhat:jboss_fuse:7 | RHSA-2021:5134 | 2021-12-14T00:00:00Z |
| Red Hat Integration Camel Quarkus 1 | |||
| jetty | cpe:/a:redhat:camel_quarkus:2.2 | RHSA-2021:4767 | 2021-11-23T00:00:00Z |
| Red Hat Migration Toolkit for Containers 1.4 | |||
| rhmtc/openshift-migration-controller-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-log-reader-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-must-gather-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-operator-bundle:v1.4.6-5 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-registry-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-rsync-transfer-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-ui-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.4.6-3 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.4.6-5 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-migration-velero-rhel8:v1.4.6-5 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| rhmtc/openshift-velero-plugin-rhel8:v1.4.6-4 | cpe:/a:redhat:rhmt:1.4::el7 | RHBA-2021:2854 | 2021-07-21T00:00:00Z |
| Red Hat OpenShift Container Platform 3.11 | |||
| jenkins-0:2.289.1.1624365627-1.el7 | cpe:/a:redhat:openshift:3.11::el7 | RHSA-2021:2517 | 2021-06-30T00:00:00Z |
| Red Hat OpenShift Container Platform 4.5 | |||
| jenkins-0:2.277.3.1623846768-1.el7 | cpe:/a:redhat:openshift:4.5::el7 | RHSA-2021:2431 | 2021-07-02T00:00:00Z |
| Red Hat OpenShift Container Platform 4.6 | |||
| jenkins-0:2.277.3.1623853726-1.el8 | cpe:/a:redhat:openshift:4.6::el8 | RHSA-2021:2499 | 2021-06-29T00:00:00Z |
| RHINT Camel-K 1.6.4 | |||
| jetty | cpe:/a:redhat:integration:1 | RHSA-2022:1029 | 2022-03-23T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3641-1 | jetty9 security update |
Github GHSA |
GHSA-86wm-rrjm-8wh8 | Buffer not correctly recycled in Gzip Request inflation |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 8.3% (8.277% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|