NVD

Id
24246  
Name
CVE-2015-2080  
Description
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-10-07  
Modified Date
2016-10-17  
Seq
2015-2080  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128413 24246 CVE-2015-2080 [jetty-announce] 20150224 Critical Security Release of Jetty 9.2.9.v20150224  View
128414 24246 CVE-2015-2080 [jetty-announce] 20150225 CVE-2015-2080 : JetLeak Vulnerability Remote Leakage of Shared Buffers in Jetty  View
128415 24246 CVE-2015-2080 FEDORA-2015-2673  View
128416 24246 CVE-2015-2080 http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html  View
128417 24246 CVE-2015-2080 20150301 GDS Labs Alert [CVE-2015-2080] - JetLeak Vulnerability: Remote Leakage Of Shared Buffers In Jetty Web Server  View
128418 24246 CVE-2015-2080 1031800  View
128419 24246 CVE-2015-2080 https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html  View
128420 24246 CVE-2015-2080 https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11957 JVNDB-2015-007278 Eclipse Jetty の例外処理コードにおけるプロセスメモリから重要な情報を取得される脆弱性 Eclipse Jetty の例外処理コードには、プロセスメモリから重要な情報を取得される脆弱性が存在します。 CVE-2015-2080 79305 CVE-2015-2080 24246 5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007278.html 2015-02-24 2016-10-19 View