| Package | Affected versions | Patched versions |
|---|---|---|
| org.eclipse.jetty:jetty-server | < 8.1.0.RC4 | 8.1.0.RC4 |
| jetty | = 1.0= 1.0.1= 1.1= 1.1.1= 1.2.0= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 2.0= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.b0= 2.1.b1= 2.2= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.7= 2.2.8= 2.3.0= 2.3.0a= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9= 3.0= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.a0= 3.0.a1= 3.0.a2= 3.0.a3= 3.0.a4= 3.0.a5= 3.0.a6= 3.0.a7= 3.0.a8= 3.0.a9= 3.0.a90= 3.0.a91= 3.0.a92= 3.0.a93= 3.0.a94= 3.0.a95= 3.0.a96= 3.0.a97= 3.0.a98= 3.0.a99= 3.0.b01= 3.0.b02= 3.0.b03= 3.0.b04= 3.0.b05= 3.1= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.1.6= 3.1.7 | |
| sun storage common array manager | = 6.9.0 |
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free= 3.1.8= 3.1.9= 4.0= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.b0= 4.0.b1= 4.0.b2= 4.0.d0= 4.0.d1= 4.0.d2= 4.0.d3= 4.0.d4= 4.1.0= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.b0= 4.1.b1= 4.1.d0= 4.1.d1= 4.1.d2= 4.2= 4.2.0= 4.2.1= 4.2.10= 4.2.11= 4.2.12= 4.2.14= 4.2.15= 4.2.16= 4.2.17= 4.2.18= 4.2.19= 4.2.2= 4.2.20= 4.2.21= 4.2.22= 4.2.23= 4.2.24= 4.2.25= 4.2.26= 4.2.27= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.2.8_01= 4.2.9= 5.0= 5.0.0= 5.1= 5.1.0= 5.1.1= 5.1.10= 5.1.11= 5.1.12= 5.1.13= 5.1.14= 5.1.2= 5.1.3= 5.1.4= 5.1.5= 5.1.6= 5.1.7= 5.1.8= 5.1.9= 6.0.0= 6.0.1= 6.0.2= 6.1.0= 6.1.1= 6.1.10= 6.1.11= 6.1.12= 6.1.14= 6.1.15= 6.1.16= 6.1.19= 6.1.2= 6.1.20= 6.1.21= 6.1.3= 6.1.4= 6.1.5= 6.1.6= 6.1.7= 6.1.8= 6.1.9= 7.0.0≤ 8.1.0