Most recent entries from all

CLEANSTART-2026-MF87519 — Security fix for CVE-2024-7708 applied in: solr 9.8.1-r1

Affected: CleanStart: solr

Security vulnerability affects the solr package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-336254

fkie_cve-2024-7708

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.

GHSA-9299-c6m4-mjhc — Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests

Affected: Maven: org.eclipse.jetty:jetty-server

### Impact The original report:

> Server handling of 100-Continue requests can lead to memory leak that can be abused to cause a Denial of Service state.

After investigation, turns out that every request that has a body, but reading the body may end up in reading 0 bytes, leaks a buffer. This is particularly the case for 100-Continue, but any request where the network is slow can leak.

### Affected Versions

* Jetty 11.0.0-11.0.22 (EOL) * Jetty 10.0.0-10.0.22 (EOL)

### Patched Versions

* Jetty 11.0.23 * Jetty 10.0.23

### Patches

https://github.com/jetty/jetty.project/pull/12156

### Workarounds

No workarounds.

UBUNTU-CVE-2024-7708

Affected: Ubuntu:16.04:LTS: jetty9, Ubuntu:18.04:LTS: jetty9, Ubuntu:20.04:LTS: jetty9, Ubuntu:22.04:LTS: jetty9, Ubuntu:24.04:LTS: jetty9, Ubuntu:26.04:LTS: jetty12, Ubuntu:26.04:LTS: jetty9

WID-SEC-W-2026-2314 — Eclipse Jetty: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.