What is GHSA-p5rr-q5g6-gm42?

GHSA-p5rr-q5g6-gm42 is a security advisory published by GitHub Security Advisories with Medium severity. Jetty HTTP Server Denial of Service vulnerability

Which CVE IDs does GHSA-p5rr-q5g6-gm42 cover?

GHSA-p5rr-q5g6-gm42 covers the following CVE IDs: CVE-2004-2381. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-p5rr-q5g6-gm42?

GHSA-p5rr-q5g6-gm42 affects 1 product, including: maven/org.mortbay.jetty:jetty:\u003c 4.2.19.

GHSA-p5rr-q5g6-gm42Medium

Jetty HTTP Server Denial of Service vulnerability

Vendor

GitHub Security Advisories

Published

April 29, 2022

Last Modified

September 18, 2023

🔗 CVE IDs covered (1)

CVE-2004-2381 →

📋 Description

HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.

🎯 Affected products1

maven/org.mortbay.jetty:jetty:< 4.2.19

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2004-2381
https://exchange.xforce.ibmcloud.com/vulnerabilities/15537
http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76
http://sourceforge.net/project/shownotes.php?release_id=224743
http://www.osvdb.org/4387
https://github.com/advisories/GHSA-p5rr-q5g6-gm42