Lucene search

K
freebsdFreeBSD2E3BEA0C-F110-11EE-BC57-00E081B7AA2D
HistoryMar 20, 2024 - 12:00 a.m.

jenkins -- HTTP/2 denial of service vulnerability in bundled Jetty

2024-03-2000:00:00
vuxml.freebsd.org
23
jenkins
security advisory
http/2
denial of service
vulnerability
jetty
cve-2024-22201

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

15.5%

Jenkins Security Advisory:

Description
(High) SECURITY-3379 / CVE-2024-22201
HTTP/2 denial of service vulnerability in bundled Jetty

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjenkins< 2.444UNKNOWN
FreeBSDanynoarchjenkins-lts< 2.440.2UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

15.5%