CVE

Id
79357  
CVE No.
CVE-2015-2080  
Status
Candidate  
Description
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.  
Phase
Assigned (20150224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721616 79357 CVE-2015-2080 BUGTRAQ:20150225 GDS Labs Alert [CVE-2015-2080] - JetLeak Vulnerability: Remote Leakage Of Shared Buffers In Jetty Web Server  View
721617 79357 CVE-2015-2080 URL:http://www.securityfocus.com/archive/1/archive/1/534755/100/1600/threaded  View
721618 79357 CVE-2015-2080 FULLDISC:20150301 GDS Labs Alert [CVE-2015-2080] - JetLeak Vulnerability: Remote Leakage Of Shared Buffers In Jetty Web Server  View
721619 79357 CVE-2015-2080 URL:http://seclists.org/fulldisclosure/2015/Mar/12  View
721620 79357 CVE-2015-2080 MLIST:[jetty-announce] 20150224 Critical Security Release of Jetty 9.2.9.v20150224  View
721621 79357 CVE-2015-2080 URL:http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html  View
721622 79357 CVE-2015-2080 MLIST:[jetty-announce] 20150225 CVE-2015-2080 : JetLeak Vulnerability Remote Leakage of Shared Buffers in Jetty  View
721623 79357 CVE-2015-2080 URL:http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html  View
721624 79357 CVE-2015-2080 MISC:http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html  View
721625 79357 CVE-2015-2080 MISC:https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html  View
721626 79357 CVE-2015-2080 CONFIRM:https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md  View
721627 79357 CVE-2015-2080 FEDORA:FEDORA-2015-2673  View
721628 79357 CVE-2015-2080 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html  View
721629 79357 CVE-2015-2080 BID:72768  View
721630 79357 CVE-2015-2080 URL:http://www.securityfocus.com/bid/72768  View
721631 79357 CVE-2015-2080 SECTRACK:1031800  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9089 JVNDB-2015-004409 HP HP-UX の execve(2) システムコールの実装における権限を取得される脆弱性 HP HP-UX の execve(2) システムコールの実装には、権限を取得される脆弱性が存在します。 CVE-2015-2132 79357 4.4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004409.html  View