CVE:CVE-2018-12545
CNNVD:CNNVD-201903-1100
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Eclipse Jetty 9.3.x版本和9.4.x版本中存在输入验证错误漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade eclipse jetty to a higher version than 9.3.0:20150601,9.3.0:20150608,9.3.0:20150612,9.3.0:maintenance0,9.3.0:maintenance1,9.3.0:maintenance2,9.3.0:rc0,9.3.0:rc1,9.3.1:20150714,9.3.2:20150730,9.3.3:20150825,9.3.3:20150827,9.3.4:20151005,9.3.4:20151007,9.3.4:rc0,9.3.4:rc1,9.3.5:20151012,9.3.6:20151106,9.3.7:20160115,9.3.7:rc0,9.3.7:rc1,9.3.8:20160311,9.3.8:20160314,9.3.8:rc0,9.3.9:20160517,9.3.9:maintenance_0,9.3.9:maintenance_1,9.3.10:20160621,9.3.10:maintenance_0,9.3.11:20160721,9.3.11:maintenance_0,9.3.12:20160915,9.3.13:20161014,9.3.13:maintenance_0,9.3.14:20161028,9.3.15:20161220,9.3.16:20170119,9.3.16:20170120,9.3.17:20170317,9.3.17:rc0,9.3.18:20170406,9.3.19:20170502,9.3.20:20170531,9.3.21:20170918,9.3.21:maintenance_0,9.3.21:rc0,9.3.22:20171030,9.3.23:20180228,9.3.24:20180605,9.4.0:20161207,9.4.0:20161208,9.4.0:20180619,9.4.0:maintenance_0,9.4.0:maintenance_1,9.4.0:rc0,9.4.0:rc1,9.4.0:rc2,9.4.0:rc3,9.4.1:20170120,9.4.1:20180619,9.4.2:20170220,9.4.2:20180619,9.4.3:20170317,9.4.3:20180619,9.4.4:20170410,9.4.4:20170414,9.4.4:20180619,9.4.5:20170502,9.4.5:20180619,9.4.6:20170531,9.4.6:20180619,9.4.7:20170914,9.4.7:20180619,9.4.7:rc0,9.4.8:20171121,9.4.8:20180619,9.4.9:20180320,9.4.10:20180503,9.4.10:rc0,9.4.10:rc1,9.4.11:20180605,9.4.12:rc0,9.4.12:rc1,9.4.12:rc2,and avoid the version 9.3.0:20150601,9.3.0:20150608,9.3.0:20150612,9.3.0:maintenance0,9.3.0:maintenance1,9.3.0:maintenance2,9.3.0:rc0,9.3.0:rc1,9.3.1:20150714,9.3.2:20150730,9.3.3:20150825,9.3.3:20150827,9.3.4:20151005,9.3.4:20151007,9.3.4:rc0,9.3.4:rc1,9.3.5:20151012,9.3.6:20151106,9.3.7:20160115,9.3.7:rc0,9.3.7:rc1,9.3.8:20160311,9.3.8:20160314,9.3.8:rc0,9.3.9:20160517,9.3.9:maintenance_0,9.3.9:maintenance_1,9.3.10:20160621,9.3.10:maintenance_0,9.3.11:20160721,9.3.11:maintenance_0,9.3.12:20160915,9.3.13:20161014,9.3.13:maintenance_0,9.3.14:20161028,9.3.15:20161220,9.3.16:20170119,9.3.16:20170120,9.3.17:20170317,9.3.17:rc0,9.3.18:20170406,9.3.19:20170502,9.3.20:20170531,9.3.21:20170918,9.3.21:maintenance_0,9.3.21:rc0,9.3.22:20171030,9.3.23:20180228,9.3.24:20180605,9.4.0:20161207,9.4.0:20161208,9.4.0:20180619,9.4.0:maintenance_0,9.4.0:maintenance_1,9.4.0:rc0,9.4.0:rc1,9.4.0:rc2,9.4.0:rc3,9.4.1:20170120,9.4.1:20180619,9.4.2:20170220,9.4.2:20180619,9.4.3:20170317,9.4.3:20180619,9.4.4:20170410,9.4.4:20170414,9.4.4:20180619,9.4.5:20170502,9.4.5:20180619,9.4.6:20170531,9.4.6:20180619,9.4.7:20170914,9.4.7:20180619,9.4.7:rc0,9.4.8:20171121,9.4.8:20180619,9.4.9:20180320,9.4.10:20180503,9.4.10:rc0,9.4.10:rc1,9.4.11:20180605,9.4.12:rc0,9.4.12:rc1,9.4.12:rc2; Upgrade fedoraproject fedora to a higher version than 28,and avoid the version 28