jetty9 vulnerabilities (Ubuntu)
38 vulnerabilities.
-
jetty9Ubuntu TuxCare security update for 123 packages (8 CVEs) 5.6 Medium -
jetty9Ubuntu TuxCare security update for 123 packages (8 CVEs) 6.9 Medium -
jetty9Ubuntu Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames 8.8 High -
jetty9Ubuntu Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring 6.9 Medium -
jetty9Ubuntu A client may send a WebSocket frame with an unknown opcode and a very large declared payload... 8.7 High -
jetty9Ubuntu A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty... 8.3 High -
jetty9Ubuntu A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are... 8.7 High -
jetty9Ubuntu Digest authentication lossy encoding 8.7 High -
jetty9Ubuntu Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests 7.5 High -
jetty9Ubuntu Eclipse Jetty: Path parameter traversal 5.3 Medium -
jetty9Ubuntu Eclipse Jetty: HTTP Authority/Host mismatch 5.3 Medium -
jetty9Ubuntu Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections 6.9 Medium -
jetty9Ubuntu HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 7.4 High -
jetty9Ubuntu Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables 7.4 High -
jetty9Ubuntu The Eclipse Jetty Server Artifact has a Gzip request memory leak 7.5 High -
jetty9Ubuntu Eclipse Jetty HTTP clients can increase memory allocation 7.5 High -
jetty9Ubuntu Jetty URI parsing of invalid authority 3.7 Low -
jetty9Ubuntu MadeYouReset HTTP/2 vulnerability 7.7 High -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 3.7 Low -
jetty9Ubuntu Jetty DOS vulnerability on DosFilter 5.3 Medium -
jetty9Ubuntu Jetty PushSessionCacheFilter can cause remote DoS attacks 3.1 Low -
jetty9Ubuntu Eclipse Jetty GZIP buffer release 7.2 High -
jetty9Ubuntu Jetty's OpenId Revoked authentication allows one request 3.5 Low -
jetty9Ubuntu Jetty accepts "+" prefixed value in Content-Length 5.3 Medium -
jetty9Ubuntu Jetty invalid URI parsing may produce invalid HttpURI.authority 2.7 Low -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
jetty9Ubuntu Encoded URIs can access WEB-INF directory in Eclipse Jetty 5.3 Medium -
jetty9Ubuntu SessionListener can prevent a session from being invalidated breaking logout 2.9 Low -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 5.3 Medium -
jetty9Ubuntu DOS vulnerability for Quoted Quality CSV headers 5.2 Medium -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.0 High -
jetty9Ubuntu Installation information leak in Eclipse Jetty 5.3 Medium -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 6.1 Medium -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 5.3 Medium -
jetty9Ubuntu Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) 9.8 Critical -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 9.8 Critical -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
jetty9Ubuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High