In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
No history.
Information
Published : 2021-02-26 22:15
Updated : 2024-11-21 05:20
NVD link : CVE-2020-27223
Mitre link : CVE-2020-27223
CVE.ORG link : CVE-2020-27223
JSON object : View
Products Affected
apache
- nifi
- solr
- spark
netapp
- e-series_santricity_os_controller
- hci
- snapmanager
- hci_management_node
- solidfire
- e-series_santricity_web_services
- snap_creator_framework
- snapcenter
- management_services_for_element_software
- element_plug-in_for_vcenter_server
debian
- debian_linux
oracle
- rest_data_services
eclipse
- jetty