BSD PortsVulnerable: version 9.2.14.20151106 is affected by 20 known vulnerabilities. See below.
www/jetty9 9.2.14.20151106 NetBSD
Jetty is a Java HTTP Server and Servlet Container
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- apache-2.0 OR epl-v1.0
- Categories
- www
- Package size
- 9619.7 KiB, 14545.2 KiB installed
Description
Jetty provides an HTTP server, HTTP client, and javax.servlet container. These components are open source and available for commercial use and distribution.
Install
Binary package:
pkgin install jettyFrom pkgsrc:
cd /usr/pkgsrc/www/jetty9 && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 9.2.14.20151106 |
| NetBSD 10.1 aarch64 | 9.2.14.20151106 |
| SmartOS / illumos x86_64 | 9.2.14.20151106 |
| macOS 15 arm64 | 9.2.14.20151106 |
Dependencies
Run dependencies 2
No port depends on this one.
Known vulnerabilities 20
- jetty: arbitrary-code-execution (CVE-2015-0254)
- jetty: eol
- jetty: http-response-smuggling (CVE-2017-7656)
- jetty: http-response-smuggling (CVE-2017-7657)
- jetty: http-response-smuggling (CVE-2017-7658)
- jetty: information-disclosure (CVE-2017-9735)
- jetty: information-disclosure (CVE-2018-12536)
- jetty: session-hijack (CVE-2018-12538)
- jetty: denial-of-service (CVE-2018-12545)
- jetty: cross-site-scripting (CVE-2019-10241)
- jetty: information-disclosure (CVE-2019-10247)
- jetty: privilege-escalation (CVE-2020-27216)
- jetty: memory-corruption (CVE-2020-27218)
- jetty: denial-of-service (CVE-2020-27223)
- jetty: information-disclosure (CVE-2021-28163)
- jetty: directory-traversal (CVE-2021-28164)
- jetty: denial-of-service (CVE-2021-28165)
- jetty: sensitive-information-disclosure (CVE-2021-28169)
- jetty: improper-session-handling (CVE-2021-34428)
- jetty: security-bypass (CVE-2021-34429)