CVE-2004-2381 Jetty HTTP Server Denial of Service vulnerability
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetty http server | = 4.0.0 | No fix listed |
| jetty http server | = 4.0.1 | No fix listed |
| jetty http server | = 4.0.1_rc0 | No fix listed |
| jetty http server | = 4.0.1_rc1 | No fix listed |
| jetty http server | = 4.0.1_rc2 | No fix listed |
| jetty http server | = 4.0.2 | No fix listed |
| jetty http server | = 4.0.3 | No fix listed |
| jetty http server | = 4.0.4 | No fix listed |
| jetty http server | = 4.0.5 | No fix listed |
| jetty http server | = 4.0.6 | No fix listed |
| jetty http server | = 4.0.b0 | No fix listed |
| jetty http server | = 4.0.b1 | No fix listed |
| jetty http server | = 4.0.b2 | No fix listed |
| jetty http server | = 4.0.d0 | No fix listed |
| jetty http server | = 4.0.d1 | No fix listed |
| jetty http server | = 4.0.d2 | No fix listed |
| jetty http server | = 4.0.d3 | No fix listed |
| jetty http server | = 4.0.d4 | No fix listed |
| jetty http server | = 4.0_rc1 | No fix listed |
| jetty http server | = 4.0_rc2 | No fix listed |
| jetty http server | = 4.0_rc3 | No fix listed |
| jetty http server | = 4.1.0 | No fix listed |
| jetty http server | = 4.1.0_rc0 | No fix listed |
| jetty http server | = 4.1.0_rc1 | No fix listed |
| jetty http server | = 4.1.0_rc2 | No fix listed |
Show 54 more
| Product | Affected versions | Fixed in |
|---|---|---|
| jetty http server | = 4.1.0_rc3 | No fix listed |
| jetty http server | = 4.1.0_rc4 | No fix listed |
| jetty http server | = 4.1.0_rc5 | No fix listed |
| jetty http server | = 4.1.0_rc6 | No fix listed |
| jetty http server | = 4.1.1 | No fix listed |
| jetty http server | = 4.1.2 | No fix listed |
| jetty http server | = 4.1.3 | No fix listed |
| jetty http server | = 4.1.4 | No fix listed |
| jetty http server | = 4.1.b0 | No fix listed |
| jetty http server | = 4.1.b1 | No fix listed |
| jetty http server | = 4.1.d0 | No fix listed |
| jetty http server | = 4.1.d1 | No fix listed |
| jetty http server | = 4.1.d2 | No fix listed |
| jetty http server | = 4.2.0 | No fix listed |
| jetty http server | = 4.2.0_beta0 | No fix listed |
| jetty http server | = 4.2.0_rc0 | No fix listed |
| jetty http server | = 4.2.0_rc1 | No fix listed |
| jetty http server | = 4.2.1 | No fix listed |
| jetty http server | = 4.2.2 | No fix listed |
| jetty http server | = 4.2.3 | No fix listed |
| jetty http server | = 4.2.4 | No fix listed |
| jetty http server | = 4.2.4_rc0 | No fix listed |
| jetty http server | = 4.2.5 | No fix listed |
| jetty http server | = 4.2.6 | No fix listed |
| jetty http server | = 4.2.7 | No fix listed |
| jetty http server | = 4.2.8_01 | No fix listed |
| jetty http server | = 4.2.9 | No fix listed |
| jetty http server | = 4.2.9_rc1 | No fix listed |
| jetty http server | = 4.2.9_rc2 | No fix listed |
| jetty http server | = 4.2.10 | No fix listed |
| jetty http server | = 4.2.10_pre0 | No fix listed |
| jetty http server | = 4.2.10_pre1 | No fix listed |
| jetty http server | = 4.2.11 | No fix listed |
| jetty http server | = 4.2.12 | No fix listed |
| jetty http server | = 4.2.14 | No fix listed |
| jetty http server | = 4.2.14_rc0 | No fix listed |
| jetty http server | = 4.2.14_rc1 | No fix listed |
| jetty http server | = 4.2.15 | No fix listed |
| jetty http server | = 4.2.15_rc0 | No fix listed |
| jetty http server | = 4.2.16 | No fix listed |
| jetty http server | = 4.2.17 | No fix listed |
| jetty http server | = 4.2.18 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | < 4.2.19 | 4.2.19 |
| org.mortbay.jetty/jetty(Maven) | = 4.1-rc1 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = 4.1-rc6 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = 4.2.10 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = 4.2.12 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = 4.2.2 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = 4.2.3 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = 4.2.9 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = test-6.0.0 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = test-6.0.0rc3 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = test-6.0.0rc4 | No fix listed |
| org.mortbay.jetty/jetty(Maven) | = test-6.0.1 | No fix listed |
References
- cvs.sourceforge.net
- 11166 patch third-party-advisory vendor-advisory
- sourceforge.net patch
- 4387 vdb-entry
- 9917 vdb-entry
- jetty-dos(15537) vdb-entry
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com