Denial-of-Service Vulnerability in Jetty's DosFilter

CVE-2024-9823

Summary

A security vulnerability has been identified in Jetty's DosFilter that allows unauthorized users to exploit the system and initiate remote denial-of-service (DoS) attacks. Attackers can send a series of specially crafted requests, which can overwhelm the server and lead to OutOfMemory errors. This results in the server exhausting its available memory, potentially leading to a complete service disruption. Administrators are urged to review their configurations and apply necessary mitigations to safeguard against this vulnerability.

References