Debian/jetty9: high 7.5
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Action: Upgrade jetty9 to 9.4.39-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.4.39-1 | - |
Fixed versions
| 9.4.39-1 |
Sources
- osv: DEBIAN-CVE-2021-28165#Debian:14/jetty9
- https://security-tracker.debian.org/tracker/CVE-2021-28165
published · modified · JSON