CVE-2024-7708 — Eclipse Foundation / Eclipse Jetty

CVE-2024-7708

Eclipse Foundation / Eclipse Jetty PUBLISHED

Description (CNA)

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse Jetty	affected 10.0.7 before 10.0.23; affected 11.0.7 before 11.0.23

CWE

CWE-400, CWE-401

References

https://gitlab.eclipse.org/security/cve-assignment/-/work_items/29

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.