Attacker Value
Unknown
CVE-2021-28165
CVE-2021-28165
(Last updated November 08, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
7.5 High
Impact Score:
3.6
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High
General Information
Vendors
- eclipse,
- jenkins,
- netapp,
- oracle
Products
- autovue for agile product lifecycle management 21.0.2,
- cloud manager,
- communications cloud native core policy 1.14.0,
- communications element manager 8.2.2,
- communications services gatekeeper 7.0,
- communications session report manager,
- communications session route manager,
- e-series performance analyzer,
- e-series santricity os controller,
- e-series santricity storage,
- e-series santricity web services,
- jenkins,
- jetty,
- ontap tools,
- rest data services,
- santricity cloud connector -,
- santricity web services proxy,
- siebel core - automation,
- snapcenter,
- storage replication adapter for clustered data ontap,
- vasa provider for clustered data ontap
References
Advisory
