正文

Eclipse Jetty 安全漏洞

admin
admin V管理员 /0 评论 /8 阅读
0303
此篇文章发布距今已超过1212天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Eclipse Jetty 安全漏洞

  • CNNVD编号：CNNVD-202007-427
    • <!--
  • 危害等级： 超危-->
  • 危害等级： 超危
  • CVE编号： CVE-2019-17638
  • 漏洞类型： 其他
  • 发布时间： 2020-07-09
  • 威胁类型： 远程
  • 更新时间： 2021-08-02
  • 厂        商：
  • 漏洞来源： Red Hat

漏洞简介

Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。

Eclipse Jetty 9.4.27.v20200227版本至9.4.29.v20200521版本中存在安全漏洞。攻击者可利用该漏洞获取敏感信息

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://bugs.eclipse.org/bugs/show_bug.cgi?id=564984

参考网址

来源:MLIST

链接:https://lists.apache.org/thread.html/rd98cfd012490cb02caa1a11aaa0cc38bff2d43bcce9b20c2f01063dd@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/rbe1f230e87ea947593145d0072d0097ddb0af10fee1161db8ca1546c@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r7fc5f2ed49641ea91c433e3cd0fc3d31c0278c87b82b15c33b881415@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r378e4cdec15e132575aa1dcb6296ffeff2a896745a8991522e266ad4@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r9a2cfa56d30782a0c17a5deb951a622d1f5c8de48e1c3b578ffc2a84@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r81f58591fb4716fb867b36956f30c7c8ad4ab3f23abc952d9d86a2a0@%3Ccommits.pulsar.apache.org%3E

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuoct2020.html

来源:MLIST

链接:https://lists.apache.org/thread.html/r4bdd3f7bb6820a79f9416b6667d718a06d269018619a75ce4b759318@%3Ccommits.pulsar.apache.org%3E

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/XE6US6VPZHOWFMUSFGDS5V2DNQPY5MKB/

来源:MLIST

链接:https://lists.apache.org/thread.html/ra8661fc8c69c647cb06153c1485d48484a833d873f75dfe45937e9de@%3Ccommits.pulsar.apache.org%3E

来源:CONFIRM

链接:https://bugs.eclipse.org/bugs/show_bug.cgi?id=564984

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2020/08/17/1

来源:MLIST

链接:https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r9584c4304c888f651d214341a939bd264ed30c9e3d0d30fe85097ecf@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r521168299e023fb075b57afe33d17ff1d09e8a10e0fd8c775ea0e028@%3Ccommits.pulsar.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r29073905dc9139d0d7a146595694bf57bb9e35e5ec6aa73eb9c8443a@%3Ccommits.pulsar.apache.org%3E

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuApr2021.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/159421/Red-Hat-Security-Advisory-2020-3841-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3508/

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpuapr2021.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3404/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/160562/Red-Hat-Security-Advisory-2020-5568-01.html

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-17638

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/159672/Red-Hat-Security-Advisory-2020-4223-01.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-i2-analyze-has-an-information-disclosure-vulnerability-cve-2019-17638/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/159535/Red-Hat-Security-Advisory-2020-4220-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.4464/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2553/

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpuoct2020.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Eclipse-Jetty-information-disclosure-via-Large-Response-Headers-32789

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-cve-2019-17638-jetty-double-release-of-a-byte-buffer/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-is-affected-by-a-vulnerability-in-eclipse-jetty-cve-2019-17638/

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021042538

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-eclipse-jetty-affects-ibm-infosphere-information-server/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cognos-analytics-has-addressed-multiple-vulnerabilities-4/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2825/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3650/

受影响实体

    暂无


补丁

  • Eclipse Jetty 安全漏洞的修复措施
    <!--
    2020-7-9
    -->