Podatność CVE-2015-2080

Podatność CVE-2015-2080

Publikacja: 2016-10-07

Opis:

	Tytuł	Autor	Data
High	Jetty 9.2.8 Shared Buffer Leakage	Gotham Digital S...	28.02.2015
Low	OpenFire XMPP 3.9.3 Certificate Handling	Simon Waters	25.04.2015
Med.	Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers	Gjoko 'Liqu...	17.02.2016
Med.	Nanometrics Centaur / TitanSMA Unauthenticated Remote Memory Leak	byteGoblin	19.02.2020

Typ:

(Information Exposure)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
5/10	2.9/10	10/10

Affected software
Fedoraproject -> Fedora
Eclipse -> Jetty

http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html

http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html

http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html

http://seclists.org/fulldisclosure/2015/Mar/12

http://www.securityfocus.com/archive/1/534755/100/1600/threaded

http://www.securitytracker.com/id/1031800

https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html

https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md

https://security.netapp.com/advisory/ntap-20190307-0005/