Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-8184

Fixed in a distro release EPSS 1%CVSS 5.9

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

Published 2024-10-14 · CVE record · OSV

Products: Eclipse Foundation Jetty

Fixed upstream

EcosystemPackageFixed in
Mavenorg.eclipse.jetty:jetty-server12.0.9
Mavenorg.eclipse.jetty:jetty-server10.0.24
Mavenorg.eclipse.jetty:jetty-server11.0.24
Mavenorg.eclipse.jetty:jetty-server9.4.56

Distro releases

ReleasePackageFixed in
Chainguardapache-nifi2.3.0-r0
Chainguardapache-nifi-compat2.3.0-r0
Chainguardapache-nifi-toolkit2.3.0-r0
Chainguardapache-tika-2.92.9.2-r1
Chainguardapache-tika-2.9-compat2.9.2-r1
Chainguardcassandra-reaper4.0.1-r1
Chainguardceleborn-0.50.5.4-r26
Chainguardcloudwatch-exporter0.16.0-r1
Chainguardconfluent-kafka8.0.0.29-r0
Chainguardconfluent-kafka-jre-bcfips8.0.0.41-r0
Chainguarddruid31.0.0-r1
Chainguarddruid-compat31.0.0-r1
Chainguardhadoop-fips-3.4.2no fix
Chainguardkafka-3.73.7.1-r2
Chainguardkafka-strimzi-compat0.45.0-r1
Chainguardkafka_exporter-strimzi-compat0.45.0-r1
Chainguardprometheus-jmx-exporter-strimzi-compat0.45.0-r1
Chainguardsolr9.7.0-r1
Chainguardsolr-oci-compat9.7.0-r1
Chainguardspark-3.5-scala-2.133.5.7-r2
Chainguardspark-fips-3.5-scala-2.133.5.8-r3
Chainguardstrimzi-kafka-operator0.45.0-r1
Chainguardstrimzi-kafka-operator-cluster-operator0.45.0-r1
Chainguardstrimzi-kafka-operator-kafka-agent0.45.0-r1
Chainguardstrimzi-kafka-operator-kafka-base0.45.0-r1
Chainguardstrimzi-kafka-operator-kafka-init0.45.0-r1
Chainguardstrimzi-kafka-operator-kafka-thirdparty-libs0.45.0-r1
Chainguardstrimzi-kafka-operator-kafka-thirdparty-libs-cc0.45.0-r1
Chainguardstrimzi-kafka-operator-topic-operator0.45.0-r1
Chainguardstrimzi-kafka-operator-tracing-agent0.45.0-r1
Chainguardstrimzi-kafka-operator-user-operator0.45.0-r1
Chainguardtezno fix
Chainguardzookeeper-3.83.8.4.0-r6
Chainguardzookeeper-3.83.8.4-r1
Chainguardzookeeper-3.8-compat3.8.4-r0
Chainguardzookeeper-3.8-iamguarded-compat3.8.4-r1
Chainguardzookeeper-3.8-iamguarded-compat3.8.4.0-r6
Chainguardzookeeper-3.93.9.3-r0
Chainguardzookeeper-3.9-iamguarded-compat3.9.3-r0
Chainguardzookeeper-fips-3.93.9.3.1-r1
Debian 11jetty99.4.57-0+deb11u1
Debian 12jetty99.4.57-0+deb12u1
Debian 13jetty99.4.56-1
Debian 14jetty99.4.56-1
SUSE Linux Enterprise Module for Development Tools 15 SP5jetty-minimal9.4.56-150200.3.28.1
SUSE Linux Enterprise Module for Development Tools 15 SP6jetty-minimal9.4.56-150200.3.28.1
SUSE Linux Enterprise Module for Package Hub 15 SP6jetty-minimal9.4.56-150200.3.28.1
Ubuntu 14.04 LTSjettyno fix
Ubuntu 16.04 LTSjettyno fix
Wolfiapache-nifi2.3.0-r0
Wolfiapache-nifi-compat2.3.0-r0
Wolfiapache-nifi-toolkit2.3.0-r0
Wolficassandra-reaper4.0.1-r1
Wolficloudwatch-exporter0.16.0-r1
Wolficonfluent-kafka8.0.0.29-r0
Wolfidruid31.0.0-r1
Wolfidruid-compat31.0.0-r1
Wolfikafka-strimzi-compat0.45.0-r1
Wolfikafka_exporter-strimzi-compat0.45.0-r1
Wolfiprometheus-jmx-exporter-strimzi-compat0.45.0-r1
Wolfisolr9.7.0-r1
Wolfisolr-oci-compat9.7.0-r1
Wolfistrimzi-kafka-operator0.45.0-r1
Wolfistrimzi-kafka-operator-cluster-operator0.45.0-r1
Wolfistrimzi-kafka-operator-kafka-agent0.45.0-r1
Wolfistrimzi-kafka-operator-kafka-base0.45.0-r1
Wolfistrimzi-kafka-operator-kafka-init0.45.0-r1
Wolfistrimzi-kafka-operator-kafka-thirdparty-libs0.45.0-r1
Wolfistrimzi-kafka-operator-kafka-thirdparty-libs-cc0.45.0-r1
Wolfistrimzi-kafka-operator-topic-operator0.45.0-r1
Wolfistrimzi-kafka-operator-tracing-agent0.45.0-r1
Wolfistrimzi-kafka-operator-user-operator0.45.0-r1
Wolfitezno fix
Wolfizookeeper-3.93.9.3-r0
Wolfizookeeper-3.9-iamguarded-compat3.9.3-r0
openSUSE Leap 15.5jetty-minimal9.4.56-150200.3.28.1
openSUSE Leap 15.6jetty-minimal9.4.56-150200.3.28.1
openSUSE Tumbleweedjetty-minimal9.4.56-2.1