CVE-2024-8184 - CVE House
Back to Database
Status published Medium CVE-2024-8184

Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

Vulnerability Description

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8184

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • https://github.com/HRsGIT

References

More from Eclipse Foundation

View All →
CVE-2025-7962
In Jakarta Mail versions prior to 2.0.2 it is possible...
Medium 6
CVE-2025-6705
A vulnerability in the Eclipse Open VSX Registry’s automated publishing...
High 7.6
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality...
High 8.7
CVE-2025-55100
Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()
Low 2.4
CVE-2025-55099
Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()
Low 2.4

Affected Vendor

Eclipse Foundation

View all reports →

Affected Software

Jetty
Vulnerable Versions:
9.3.12, 10.0.0, 11.0.0, 12.0.0

Timeline

Official Publish: October 14th, 2024
Last Modified: November 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact