Skip to content
Sign in
5.9 Medium

CVE-2024-8184 There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized…

Description

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

Affected products and versions

Product Affected versions Fixed in
Jetty 12.0 12.0.0 → 12.0.8 No fix stated
Jetty 11.0 11.0.0 → 11.0.23 No fix stated
Jetty 10.0 10.0.0 → 10.0.23 No fix stated
Jetty 9.3 9.3.12 → 9.4.55 No fix stated

Other CVEs of Jetty

The 6 CVEs of Jetty →
CVE-2025-1948 In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2… 7.5 High CVE-2024-13009 In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when… 7.2 High CVE-2024-6762 Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the… 3.1 Low CVE-2024-6763 Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine 3.7 Low
Track this CVE