In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
No history.
Information
Published : 2021-02-26 22:15
Updated : 2024-11-21 05:20
NVD link : CVE-2020-27223
Mitre link : CVE-2020-27223
CVE.ORG link : CVE-2020-27223
JSON object : View
Products Affected
netapp
- hci
- snapmanager
- snap_creator_framework
- hci_management_node
- snapcenter
- e-series_santricity_web_services
- management_services_for_element_software
- e-series_santricity_os_controller
- solidfire
- element_plug-in_for_vcenter_server
eclipse
- jetty
debian
- debian_linux
oracle
- rest_data_services
apache
- spark
- nifi
- solr