Uploaded image for project: 'Debezium'
  1. Debezium
  2. DBZ-8320

CVE-2024-8184 org.eclipse.jetty/jetty-server: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks [rhint-debezium-2]

XMLWordPrintable

    • False
    • None
    • False
    • CVEORG
    • CVE-2024-8184
    • Moderate
    • 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    • CWE-400
    • org.eclipse.jetty/jetty-server
    • jetty; org.eclipse.jetty:jetty-server
    • False

      Security Tracking Issue

      Do not make this issue public.

      Flaw:

      Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
      https://bugzilla.redhat.com/show_bug.cgi?id=2318564

      There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

      ~~~

              Unassigned Unassigned
              rh-ee-rgatica Robb Gatica
              Chess Hazlett, Chris Cranford, Jakub Čecháček, Jiri Pechanec, Jonathan Anstey
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: