CVE-2024-13009

ADVISORY - github

Summary

In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.

EPSS Score⁠: 0.00172 (0.387)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-404⁠

Improper Resource Shutdown or Release

ADVISORY - github

CWE-404⁠

Improper Resource Shutdown or Release

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-404⁠

Improper Resource Shutdown or Release

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-404⁠

Improper Resource Shutdown or Release

Impacted images

Advisories

NIST

CREATED

9 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2024-13009⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-404⁠

CVSS SCORE

7.2high

GitHub

CREATED

9 months ago

UPDATED

9 months ago

ADVISORY IDGHSA-q4rv-gq96-w7c5⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-404⁠

CVSS SCORE

7.2high

Debian

CREATED

9 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2024-13009⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

9 months ago

UPDATED

20 days ago

ADVISORY IDCVE-2024-13009⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

GitLab

CREATED

9 months ago

UPDATED

9 months ago

ADVISORY ID

CVE-2024-13009

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-404⁠CWE-937⁠

CVSS SCORE

7.2high

Red Hat

CREATED

9 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2024-13009⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-404⁠

CVSS SCORE

7.2high

Chainguard

CREATED

9 months ago

UPDATED

9 months ago

ADVISORY ID

CGA-45cx-7c8c-j882

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

30 days ago

UPDATED

30 days ago

ADVISORY ID

CGA-57m8-98xr-9749

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

9 months ago

UPDATED

9 months ago

ADVISORY ID

CGA-rwgq-jjw3-3vrc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

24 days ago

UPDATED

24 days ago

ADVISORY ID

MINI-5h5c-86q2-xqpm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

MINI-9fww-ff9h-5cwp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

8 months ago

UPDATED

8 months ago

ADVISORY ID

MINI-v6h6-whrm-g559

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY