Eclipse Jetty: Denial of Service vulnerability
Eclipse Jetty is susceptible to a denial-of-service (DoS) vulnerability that can be exploited by a remote, unauthenticated attacker.
Triage facts
Revision 1- Applicability
- Eclipse Jetty
- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Oct 26, 19:12 UTC
- Source quality
- A1Roughly even chance
A vulnerability in Eclipse Jetty allows a remote, unauthenticated attacker to trigger a denial-of-service condition. Specific technical details regarding the root cause or the nature of the malformed request are not disclosed in the current advisory.
Impact
Successful exploitation allows an unauthenticated remote attacker to disrupt the availability of the affected service.
Recommendation
- Inventory all environments running Eclipse Jetty to identify exposure.
- Monitor the Eclipse Foundation security advisories for patch availability and version release notes.
- Implement rate limiting and load balancing at the network perimeter to mitigate the impact of potential DoS traffic until patches are applied.
Immediate actions
Identify all instances of Eclipse Jetty in the environment.
Threat Hunt
Monitor for high volumes of malformed or anomalous HTTP requests directed at application entry points.
Data: Web server access logs, Firewall or WAF request logs
Mitigations
Apply security patches or updates as released by the Eclipse Foundation.
Eclipse Jetty