7.5Hoch
CVE-2024-7708
Beschreibung
For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Eclipse Foundation | Eclipse Jetty | 10.0.7 – < 10.0.23, 11.0.7 – < 11.0.23 | |
| eclipse | jetty | 10.0.7 – < 10.0.23 |
Referenzen und Patches
- https://gitlab.eclipse.org/security/cve-assignment/-/work_items/29 Issue TrackingVendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*≥ 10.0.7 < 10.0.23cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*≥ 11.0.7 < 11.0.23