This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-28165 →

DEBIAN-CVE-2021-28165

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS fr...

Original description

The description as published by the source.

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 jetty9

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.39-1"}]}]

Debian:13 jetty9

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.39-1"}]}]

Debian:14 jetty9

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.39-1"}]}]

References

advisory security-tracker.debian.org