high7.5Public exploit code
CVE-2015-2080
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal cha…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Inductive Automation Ignition 7.8.1 - Remote Leakage Of Shared Buffers2016-02-17 · remote · multiple
Impact
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fedoraproject | Fedora | Version 22 |
| Eclipse | Jetty | Versions 9.2.3, 9.2.4, 9.2.5, 9.2.6, 9.2.7, 9.2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html
- http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html
- http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html
- http://seclists.org/fulldisclosure/2015/Mar/12
- http://www.securityfocus.com/archive/1/534755/100/1600/threaded
- http://www.securityfocus.com/bid/72768
- http://www.securitytracker.com/id/1031800
- https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html
- https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md
- https://security.netapp.com/advisory/ntap-20190307-0005/
- http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html
- http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html
- http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html
- http://seclists.org/fulldisclosure/2015/Mar/12
- http://www.securityfocus.com/archive/1/534755/100/1600/threaded
- http://www.securityfocus.com/bid/72768
- http://www.securitytracker.com/id/1031800
- https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html
- https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md
- https://security.netapp.com/advisory/ntap-20190307-0005/