Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-8184

Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Jetty

Default version status: unaffected

  • 9.3.12 to ≤ 9.4.55affected
  • 10.0.0 to ≤ 10.0.23affected
  • 11.0.0 to ≤ 11.0.23affected
  • 12.0.0 to ≤ 12.0.8affected

References