Apply template

XML

Word

Printable

Details

Type: Work Item
Status: Done
Priority: Critical
Resolution: Fixed
Affects Version/s: None
Fix Version/s: connectors/1.37.0, 8.0.1-R2022-09
Component/s: None
Labels:
- CN
- CVE
- TCOMP_V0
- UA
- cve

Epic Link:
Security lib update
GreenHopper Ranking:
0|i2iaxv:
GreenHopper Ranking (Obsolete):
9223372036854775807

Description

Denial Of Service (DoS) in Talend/cloud-components (master)

Issue Details

Vulnerability: Denial Of Service (DoS)
Severity: High
Project: Talend/cloud-components
Branch: master
Scan Date: Unknown

Issue Description

Jetty-IO is vulnerable to denial of service. The vulnerability exists because the buffer utilization of SslConnection is not properly handled which allows an attacker to cause a memory leak leading to an application crash.

View more details

Attachments

Activity

People

Assignee:: pierre teyssier

Reporter:: Wei Wang

Fixed by:: Dmytro Grygorenko (Inactive), Xuejing Liu

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Due:: 06/Oct/2022

Created:: 01/Aug/22 3:38 AM

Updated:: 28/Sep/22 5:37 AM

Resolved:: 28/Sep/22 4:30 AM

Time Tracking

Estimated:

Remaining:

Logged: