HIGH✓ PATCH🇬🇧 English

CVE-2021-28165

CVSS 7.5v3.1pub. 2021-04-01upd. 2025-08-27

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Eclipse Jetty
APP
Eclipse
7.2.2 – 9.4.39 (bez)10.0.0 – 10.0.2 (bez)11.0.0 – 11.0.2 (bez)
Jenkins
APP
Jenkins
< 2.286< 2.277.3
Netapp Cloud Manager
APP
Netapp
< 3.9.8
Netapp E Series Performance Analyzer
APP
Netapp
< 3.0
Netapp E Series Santricity Os Controller
APP
Netapp
11.0.0 – 11.70.1 (bez)
Netapp E Series Santricity Storage
APP
Netapp
< 1.10
Netapp E Series Santricity Web Services
APP
Netapp
< 5.1
Netapp Ontap Tools
APP
Netapp
< 9.10
Netapp Santricity Cloud Connector
APP
Netapp
wszystkie wersje
Netapp Santricity Web Services Proxy
APP
Netapp
< 5.1
Netapp Snapcenter
APP
Netapp
< 4.6
Netapp Storage Replication Adapter For Clustered Data Ontap
APP
Netapp
< 9.10
Netapp Vasa Provider For Clustered Data Ontap
APP
Netapp
< 9.10
Oracle Autovue For Agile Product Lifecycle Management
APP
Oracle
21.0.2
Oracle Communications Cloud Native Core Policy
APP
Oracle
1.14.0
Oracle Communications Element Manager
APP
Oracle
8.2.2
Oracle Communications Services Gatekeeper
APP
Oracle
7.0
Oracle Communications Session Report Manager
APP
Oracle
8.0.0.0 – 8.2.4.0
Oracle Communications Session Route Manager
APP
Oracle
8.0.0.0 – 8.2.4.0
Oracle Rest Data Services
APP
Oracle
< 21.3
Oracle Siebel Core Automation
APP
Oracle
≤ 21.9