jetty: Resource exhaustion when receiving an invalid large TLS frame
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| The Eclipse Foundation | Eclipse Jetty | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat AMQ 7.8.2 | |||
| jetty-server | cpe:/a:redhat:amq_broker:7 | RHSA-2021:2689 | 2021-07-12T00:00:00Z |
| Red Hat AMQ 7.9.0 | |||
| jetty-server | cpe:/a:redhat:amq_broker:7 | RHSA-2021:3700 | 2021-09-30T00:00:00Z |
| Red Hat AMQ Streams 1.6.4 | |||
| jetty-server | cpe:/a:redhat:amq_streams:1 | RHSA-2021:1560 | 2021-05-13T00:00:00Z |
| Red Hat AMQ Streams 1.8.0 | |||
| jetty-server | cpe:/a:redhat:amq_streams:1 | RHSA-2021:3225 | 2021-08-19T00:00:00Z |
| Red Hat Developer Tools | |||
| rh-eclipse-jetty-0:9.4.40-1.1.el7_9 | cpe:/a:redhat:devtools:2021 | RHSA-2021:1509 | 2021-05-06T00:00:00Z |
| Red Hat Fuse 7.9 | |||
| jetty | cpe:/a:redhat:jboss_fuse:7 | RHSA-2021:3140 | 2021-08-11T00:00:00Z |
| Red Hat Integration Camel Quarkus 1 | |||
| jetty | cpe:/a:redhat:camel_quarkus:2.2 | RHSA-2021:4767 | 2021-11-23T00:00:00Z |
| Red Hat OpenShift Container Platform 4.7 | |||
| jenkins-0:2.277.3.1620393611-1.el8 | cpe:/a:redhat:openshift:4.7::el7 | RHSA-2021:1551 | 2021-05-19T00:00:00Z |
| runc-0:1.0.0-95.rhaos4.8.gitcd80260.el7 | cpe:/a:redhat:openshift:4.7::el7 | RHSA-2021:1551 | 2021-05-19T00:00:00Z |
| RHAF Camel-K 1.8 | |||
| jetty | cpe:/a:redhat:integration:1 | RHSA-2022:6407 | 2022-09-09T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-26vr-8j45-3r4w | Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 53.9% (53.861% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|