CVE:CVE-2021-28165
CNNVD:CNNVD-202104-034
Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。
Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1 存在资源管理错误漏洞，该漏洞源于接收到较大的无效TLS帧后，CPU使用率可以达到100％。
solution:Upgrade eclipse jetty to a higher version than 9.4.39,10.0.2,11.0.2,and avoid the version [7.2.2,9.4.39),[10.0.0,10.0.2),[11.0.0,11.0.2); Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_element_manager to a higher version than 8.2.2,and avoid the version 8.2.2; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_report_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0.0,8.2.4.0]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0.0,8.2.4.0]; Upgrade oracle rest_data_services to a higher version than 21.3,and avoid the version (,21.3); Upgrade oracle siebel_core_-_automation to a higher version than 21.9,and avoid the version (,21.9]; Upgrade jenkins jenkins to a higher version than 2.277.3,2.286,and avoid the version (,2.277.3),(,2.286); Upgrade netapp cloud_manager to a higher version than 3.9.8,and avoid the version (,3.9.8); Upgrade netapp e-series_performance_analyzer to a higher version than 3.0,and avoid the version (,3.0); Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1); Upgrade netapp e-series_santricity_storage to a higher version than 1.10,and avoid the version (,1.10); Upgrade netapp e-series_santricity_web_services to a higher version than 5.1,and avoid the version (,5.1); Upgrade netapp ontap_tools to a higher version than 9.10,and avoid the version (,9.10); Upgrade netapp santricity_cloud_connector to a higher version than -; Upgrade netapp santricity_web_services_proxy to a higher version than 5.1,and avoid the version (,5.1); Upgrade netapp snapcenter to a higher version than 4.6,and avoid the version (,4.6); Upgrade netapp storage_replication_adapter_for_clustered_data_ontap to a higher version than 9.10,and avoid the version (,9.10); Upgrade netapp vasa_provider_for_clustered_data_ontap to a higher version than 9.10,and avoid the version (,9.10)