CVE-2023-36478 — Integer Overflow or Wraparound in Jetty

CWE-190 — Integer Overflow or WraparoundCWE-400 — Uncontrolled Resource Consumption11 documents9 sources
Severity
7.5HIGHNVD
EPSS
1.5%
top 19.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Eclipse JettyJenkinsEclipse Jetty.project+1 more
Timeline
PublishedOct 10
Latest updateJul 15

Description

Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295 will overflo…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDeclipse/jetty9.3.0 — 9.4.53+2
▶CVEListV5eclipse/jetty.project>= 10.0.0, < 10.0.16, >= 11.0.0, < 11.0.16, >= 9.3.0, < 9.4.53+2
▶NVDjenkins/jenkins< 2.414.3+1

Also affects: Debian Linux 10.0, 11.0, 12.0

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
HTTP/2 HPACK integer overflow and buffer allocation↗2023-10-10
▶
OSV
CVE-2023-36478: Eclipse Jetty provides a web server and servlet container↗2023-10-10
▶
GHSA
HTTP/2 HPACK integer overflow and buffer allocation↗2023-10-10
▶
CVEList
HTTP/2 HPACK integer overflow and buffer allocation↗2023-10-10
▶

📋Vendor Advisories

6
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Containers (Eclipse Jetty) — CVE-2023-36478↗2024-07-15
▶
Atlassian
CVE-2023-36478: DoS (Denial of Service) org.eclipse.jetty:jetty-http Dependency in Bitbucket Data Center and Server↗2024-01-16
▶
Oracle
Oracle Oracle Communications Risk Matrix: Platform (Eclipse Jetty) — CVE-2023-36478↗2024-01-15
▶
Jenkins
Jenkins Security Advisory 2023-10-18↗2023-10-18
▶
Red Hat
jetty: hpack header values cause denial of service in http/2↗2023-10-10
▶
CVE-2023-36478 — Integer Overflow or Wraparound | cvebase