High severityNVD Advisory· Published May 8, 2025· Updated May 8, 2025
Eclipse Jetty GZIP buffer release
CVE-2024-13009
Description
In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.eclipse.jetty:jetty-serverMaven | >= 9.4.0, < 9.4.57.v20241219 | 9.4.57.v20241219 |
Affected products
23- osv-coords22 versionspkg:apk/chainguard/cassandra-reaperpkg:apk/chainguard/webswingpkg:apk/wolfi/cassandra-reaperpkg:maven/org.eclipse.jetty/jetty-serverpkg:rpm/opensuse/jetty-minimal&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/jetty-minimal&distro=openSUSE%20Tumbleweedpkg:rpm/suse/jetty-minimal&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/jetty-minimal&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
< 3.8.0-r3+ 21 more
- (no CPE)range: < 3.8.0-r3
- (no CPE)range: < 24.2.2-r0
- (no CPE)range: < 3.8.0-r3
- (no CPE)range: >= 9.4.0, < 9.4.57.v20241219
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-1.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
- (no CPE)range: < 9.4.57-150200.3.31.1
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.