Remote Denial-of-Service Vulnerability in Jetty by Eclipse Foundation

CVE-2024-8184

What is CVE-2024-8184?

A security vulnerability exists in the ThreadLimitHandler.getRemote() method of Jetty, enabling unauthorized users to launch a remote denial-of-service (DoS) attack. Attackers can exploit this flaw by sending a series of specially crafted requests, which may lead to OutOfMemory errors, effectively exhausting the server's resources and making the service unavailable. This vulnerability poses a significant risk to the stability and reliability of applications running on affected Jetty versions.

References