jetty-minimal vulnerabilities (openSUSE)
23 vulnerabilities.
jetty-minimalopenSUSEA client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are...8.7 Highjetty-minimalopenSUSEDigest authentication lossy encoding8.7 Highjetty-minimalopenSUSEHTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.4 Highjetty-minimalopenSUSEDuplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables7.4 Highjetty-minimalopenSUSEJetty URI parsing of invalid authority3.7 Lowjetty-minimalopenSUSEHTTP/2 HPACK integer overflow and buffer allocation7.5 Highjetty-minimalopenSUSEMadeYouReset HTTP/2 vulnerability7.7 Highjetty-minimalopenSUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations3.7 Lowjetty-minimalopenSUSEJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks5.9 Mediumjetty-minimalopenSUSEJetty connection leaking on idle timeout when TCP congested7.5 Highjetty-minimalopenSUSEEclipse Jetty GZIP buffer release7.2 Highjetty-minimalopenSUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highjetty-minimalopenSUSEJetty's OpenId Revoked authentication allows one request3.5 Lowjetty-minimalopenSUSEJetty accepts "+" prefixed value in Content-Length5.3 Mediumjetty-minimalopenSUSEJetty vulnerable to errant command quoting in CGI Servlet3.5 Lowjetty-minimalopenSUSECookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Lowjetty-minimalopenSUSEOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumjetty-minimalopenSUSEEncoded URIs can access WEB-INF directory in Eclipse Jetty5.3 Mediumjetty-minimalopenSUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations5.3 Mediumjetty-minimalopenSUSEJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources7.5 Highjetty-minimalopenSUSEAuthorization Before Parsing and Canonicalization in jetty5.3 Mediumjetty-minimalopenSUSEDirectory exposure in jetty2.7 Lowjetty-minimalopenSUSEBuffer not correctly recycled in Gzip Request inflation4.8 Medium