Vulnerability CVE-2015-2080

Vulnerability CVE-2015-2080

Published: 2016-10-07

Description:

	Topic	Author	Date
High	Jetty 9.2.8 Shared Buffer Leakage	Gotham Digital S...	28.02.2015
Low	OpenFire XMPP 3.9.3 Certificate Handling	Simon Waters	25.04.2015
Med.	Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers	Gjoko 'Liqu...	17.02.2016
Med.	Nanometrics Centaur / TitanSMA Unauthenticated Remote Memory Leak	byteGoblin	19.02.2020

Type:

(Information Exposure)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Affected software
Fedoraproject -> Fedora
Eclipse -> Jetty

http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html

http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html

http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html

http://seclists.org/fulldisclosure/2015/Mar/12

http://www.securityfocus.com/archive/1/534755/100/1600/threaded

http://www.securitytracker.com/id/1031800

https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html

https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md

https://security.netapp.com/advisory/ntap-20190307-0005/