Description
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.mortbay.jetty:jetty | < 4.2.19 | 4.2.19 | GHSA-p5rr-q5g6-gm42 |
References
- 4387 vdb-entry
- 11166 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=224743
- jetty-dos(15537) vdb-entry
- 9917 vdb-entry
- http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76