Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-9823

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.

Published

2024-10-14T15:15:14.560

Last Modified

2025-07-30T19:51:05.457

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-400

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	eclipse	jetty	< 9.4.54	Yes
Application	eclipse	jetty	< 10.0.18	Yes
Application	eclipse	jetty	< 11.0.18	Yes
Application	eclipse	jetty	< 12.0.3	Yes
Operating System	netapp	bootstrap_os	-	Yes
Hardware	netapp	hci_compute_node	-	No
Application	netapp	active_iq_unified_manager	-	Yes
Application	netapp	active_iq_unified_manager	-	Yes
Application	netapp	active_iq_unified_manager	-	Yes

References

https://github.com/jetty/jetty.project/issues/1256 Issue Tracking ([email protected])
https://github.com/jetty/jetty.project/security/advisories/GHSA-7hcf-ppf8-5w5h Vendor Advisory ([email protected])
https://gitlab.eclipse.org/security/cve-assignement/-/issues/39 Issue Tracking, Vendor Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20250306-0006/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)