Skip to content
OpenAdvisories

Vendor

eclipse

16 known vulnerabilities.

Products

jetty.project 6 Mosquitto 3 keti 2 Equinox OSGi 2 CycloneDDS 2 deeplearning4j 1 IDE 0 Jetty < 9.4.43 0 Jetty < 10.0.6 0 Jetty < 11.0.6 0 Jetty 0 Jetty < 10.0.16 0 Jetty < 11.0.16 0 Jetty < 12.0.0 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-5632

    Unconditionally adding an event to the epoll causes excessive CPU consumption

    In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of…

    eclipse Mosquitto mosquitto Debian
  • High 7.5
    CVE-2023-36478

    HTTP/2 HPACK integer overflow and buffer allocation

    Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limi…

    eclipse jetty.project jetty9 jetty Debian Ubuntu Alpine Maven
  • High 8.2
    CVE-2021-32834

    Arbitrary Groovy script evaluation in Eclipse Keti

    Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti a user able to create Policy Sets can run arbitrary code by sending malicious Groovy scripts which will escape the configured Groovy sandb…

    eclipse keti