GitHub Advisoryadvisory · Maven

GHSA-p5rr-q5g6-gm42 Jetty HTTP Server Denial of Service vulnerability

MEDIUM Published 2022-04-29 Modified 2023-09-18 Official page ↗
Aliases
CVE-2004-2381
Ecosystem
Maven
Packages
org.mortbay.jetty:jetty
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2023-09-18

Affected packages

• Maven org.mortbay.jetty:jetty: < 4.2.19 → fixed in 4.2.19

Description

HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.

Related

Alias · CVE (1)

  • CVE-2004-2381 HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash)… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References