In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests.
The product does not release or incorrectly releases a resource before it is made available for re-use.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Red Hat build of Apache Camel 4.10.3 for Spring Boot 3.4.7 | RedHat | jetty-server | * |
Streams for Apache Kafka 2.9.1 | RedHat | jetty-server | * |
Jetty9 | Ubuntu | focal | * |
Jetty9 | Ubuntu | upstream | * |