Skip to content
fr Sign in
3.1 Low

CVE-2024-6762 Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the…

Description

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory.

Affected products and versions

Product Affected versions Fixed in
Jetty 12.0 12.0.0 → 12.0.3 No fix stated
Jetty 11.0 11.0.0 → 11.0.17 No fix stated
Jetty 10.0 10.0.0 → 10.0.17 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Jetty

The 6 CVEs of Jetty →
CVE-2025-1948 In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2… 7.5 High CVE-2024-13009 In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when… 7.2 High CVE-2024-8184 There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized… 5.9 Medium CVE-2024-6763 Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine 3.7 Low
Track this CVE