VDB
BDU%3A2021-04177
BDU%3A2021-04177
PUBLISHED
CVSS 10 CRITICAL
Уязвимость контейнера сервлетов Eclipse Jetty, связанная с непоследовательной интерпретацией http-запросов, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Oracle Corp., Eclipse Foundation | Red Hat Enterprise Linux, Debian GNU/Linux, Jboss Fuse, Retail Xstore Point of Service, Red Hat Software Collections, Jetty, Jboss Fuse Service Works, REST Data Services, Oracle Communications Cloud Native Core Policy | |
| Red Hat, Inc., Сообщество свободного программного обеспечения, Oracle Corp., Eclipse Foundation | Red Hat Enterprise Linux, Debian GNU/Linux, Jboss Fuse, Retail Xstore Point of Service, Red Hat Software Collections, Jetty, Jboss Fuse Service Works, REST Data Services, Oracle Communications Cloud Native Core Policy |
Timeline
- Aug 24, 2021 CVE Published
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
References
- http://www.securitytracker.com/id/1041194 url
- https://access.redhat.com/errata/RHSA-2019:0910 url
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=535668 advisory
- https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E url
- https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E url
- https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E url
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E url
- https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8@%3Ccommits.druid.apache.org%3E url
- https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae@%3Ccommits.druid.apache.org%3E url
- https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574@%3Ccommits.druid.apache.org%3E url
- https://security.netapp.com/advisory/ntap-20181014-0001/ url
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us url
- https://www.debian.org/security/2018/dsa-4278 advisory
- https://www.oracle.com//security-alerts/cpujul2021.html advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html url
- https://access.redhat.com/security/cve/CVE-2017-7657 advisory
- https://www.oracle.com/security-alerts/cpuoct2019.html advisory