CVE-2018-12545

EPSS 3.54% · P88 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-12545

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

未加控制的资源消耗(资源穷尽)

Source: NVD (National Vulnerability Database)

Vulnerability Title

Eclipse Jetty 输入验证错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Eclipse Jetty是Eclipse基金会的一个开源的、基于Java的Web服务器和Java Servlet容器。 Eclipse Jetty 9.3.x版本和9.4.x版本中存在输入验证错误漏洞。攻击者可利用该漏洞造成拒绝服务。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
The Eclipse Foundation	Eclipse Jetty	9.3.0 ~ unspecified	-

II. Public POCs for CVE-2018-12545

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2018-12545

请登录查看更多情报信息。

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlx_refsource_MISC
https://bugs.eclipse.org/bugs/show_bug.cgi?id=538096x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuoct2020.htmlx_refsource_MISC
https://lists.apache.org/thread.html/13f5241048ec0bf966a6ddd306feaf40de5b20e1f09096b9cddeddf2%40%3Ccommits.accumulo.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/70744fe4faba8e2fa7e50a7fc794dd03cb28dad8b21e08ee59bb1606%40%3Cdevnull.infra.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/febc94ffec9275dcda64633e0276a1400cd318e571009e4cda9b7a79%40%3Cnotifications.accumulo.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3Emailing-listx_refsource_MLIST
[GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1-Apache Mail Archivesmailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2018-12545

Same Patch Batch · The Eclipse Foundation · 2019-03-27 · 5 CVEs total

CVE-2018-12546		Eclipse Mosquitto 安全特征问题漏洞
CVE-2018-12550		Eclipse Mosquitto 访问控制错误漏洞
CVE-2018-12551		Eclipse Mosquitto 授权问题漏洞
CVE-2017-7655		Eclipse Mosquitto 代码问题漏洞

IV. Related Vulnerabilities

Same product: Eclipse Jetty

Same vendor: The Eclipse Foundation

Same weakness: CWE-400

V. Comments for CVE-2018-12545

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2018-12545

I. Basic Information for CVE-2018-12545

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2018-12545

III. Intelligence Information for CVE-2018-12545

Same Patch Batch · The Eclipse Foundation · 2019-03-27 · 5 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2018-12545

Leave a comment