Intrusion PreventionEclipse.Jetty.HTTP2.SETTINGS.Frames.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Eclipse Foundation Jetty Web Server
A remote, unauthenticated attacker can exploit this vulnerability by sending a large number of SETTINGS frames to the target server. Successful exploitation results in denial of service conditions on the target server.
Affected Products
Eclipse Foundation Jetty Web Server 9.3.x prior to 9.3.25.v20180904
Eclipse Foundation Jetty Web Server 9.4.x prior to 9.4.12.v20180830
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://bugs.eclipse.org/bugs/show_activity.cgi?id=538096
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-11-07 | 26.672 | Sig Added |
| 2019-05-24 | 14.620 | Default_action:pass:drop |
| 2019-05-16 | 14.615 |
| ID | 47803 |
| Created | May 16, 2019 |
| Updated | Nov 07, 2023 |
| Risk |
|
| CVE ID | CVE-2018-12545 |
| Exploit Prediction Score | 5.66% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |