Denial of Service Vulnerability in Eclipse Jetty Server
CVE-2018-12545

7.5HIGH

Key Information:

Vendor: The Eclipse Foundation
Status: Eclipse Jetty
Vendor: CVE Published:; 27 March 2019

🔔 Create The Eclipse Foundation Vulnerability Alert

What is CVE-2018-12545?

Eclipse Jetty versions 9.3.x and 9.4.x are susceptible to Denial of Service attacks when a remote client sends excessively large SETTINGS frames or multiple small SETTINGS frames. The vulnerability arises from the server's increased CPU and memory demand to accommodate these frame modifications, potentially leading to resource exhaustion and service unavailability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch