5.3
Medium
CVE-2024-9823 There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause…
Description
There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jetty 11.0 | 11.0.0 → < 11.0.18 | 11.0.18 |
| Jetty 10.0 | 10.0.0 → < 10.0.18 | 10.0.18 |
| Jetty 9.0 | 9.0.0 → < 9.4.54 | 9.4.54 |
| Jetty 12.0 | 12.0.0 → < 12.0.3 | 12.0.3 |
| jetty 12.0 | 12.0.0 → < 12.0.3 | 12.0.3 |
| jetty 11.0 | 11.0.0 → < 11.0.18 | 11.0.18 |
| jetty 10.0 | 10.0.0 → < 10.0.18 | 10.0.18 |
| jetty 9.0 | 9.0.0 → < 9.4.54 | 9.4.54 |
Other CVEs of Jetty
The 6 CVEs of Jetty →
CVE-2025-1948
In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2…
7.5
High
CVE-2024-13009
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when…
7.2
High
CVE-2024-8184
There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized…
5.9
Medium
CVE-2024-6762
Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the…
3.1
Low