StackRadar

CVE-2017-7656

High

Advisory

Published 19 Oct 2018In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.063
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
jetty-servermaven7.6.0.v20120127, 8.1.7.v20120910, 8.1.9.v20130131, 8.1.12.v20130726+16 more9.3.24.v20180605, 9.4.11.v2018060536
OSV records
GHSA-84q7-p226-4x5w

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.41 of 3See more

spark microsoft 1.0.4

1 of the 3 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.11.v20160721
9.3.24.v20180605

Open the chart page →

13,738
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

8,636
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.24.v20180605

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.3.24.v20180605
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.3.24.v20180605
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.24.v20180605

Open the chart page →

7,335
dynamodbkeyporttech0.1.271 of 2See more

dynamodb keyporttech 0.1.27

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
amazon/dynamodb-local:1.12.08414d80019b0
jetty-server@8.1.12.v20130726
9.3.24.v20180605

Open the chart page →

1,304
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-server@9.2.5.v20141112
9.3.24.v20180605

Open the chart page →

8,198
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.24.v20180605

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.3.24.v20180605

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jetty-server@7.6.0.v20120127
9.3.24.v20180605

Open the chart page →

6,165
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.11.v20180605

Open the chart page →

2,406
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.11.v20180605

Open the chart page →

5,078
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.11.v20180605

Open the chart page →

7,226
prometheus-cloudwatch-exportercloudnativeapp0.4.51 of 1See more

prometheus-cloudwatch-exporter cloudnativeapp 0.4.5

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
jetty-server@8.1.7.v20120910
9.3.24.v20180605

Open the chart page →

2,629
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

23,665
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.11.v20180605

Open the chart page →

16,860
ldapd4nVerified publisher0.1.01 of 1See more

ldap d4n 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
dwimberger/ldap-ad-it:latest0c636e55eb82
jetty-server@8.1.9.v20130131
9.3.24.v20180605

Open the chart page →

1,657
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
jetty-server@9.2.22.v20170606
9.3.24.v20180605

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.24.v20180605

Open the chart page →

5,639
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

19,802
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.3.24.v20180605
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.3.24.v20180605
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.3.24.v20180605

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605

Open the chart page →

17,511
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.11.v20180605

Open the chart page →

4,303
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

6,362
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jetty-server@9.2.13.v20150730
9.3.24.v20180605

Open the chart page →

19,295
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.11.v20180605

Open the chart page →

10,682
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.11.v20180605

Open the chart page →

15,855
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

5,663
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
jetty-server@9.2.2.v20140723
9.3.24.v20180605

Open the chart page →

4,989
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
jetty-server@9.2.10.v20150310
9.3.24.v20180605

Open the chart page →

55,726
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
jetty-server@8.1.17.v20150415
9.3.24.v20180605

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
jetty-server@8.1.17.v20150415
9.3.24.v20180605

Open the chart page →

38,865
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-server@9.4.8.v20171121
9.4.11.v20180605

Open the chart page →

4,177
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
jetty-server@8.1.7.v20120910
9.3.24.v20180605

Open the chart page →

6,907
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

13,079
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

8,554
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.11.v20180605

Open the chart page →

4,303
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2017-7656.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
jetty-server@8.1.15.v20140411
9.3.24.v20180605

Open the chart page →

6,213

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.3.24.v20180605
8
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.3.24.v20180605
4
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.24.v20180605
4
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.11.v20180605
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.3.24.v20180605
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.11.v20180605
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.24.v20180605
1
amazon/dynamodb-local:1.12.08414d80019b0
jetty-server@8.1.12.v20130726
9.3.24.v20180605
1
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.24.v20180605
1
atlassian/crowd:5.2.2ebf761c7d437
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
atlassian/jira-software:8.14.037bc46cbec1a
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
atlassian/jira-software:9.7.264a75aa4ec4e
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.11.v20180605
1
craigwillis/c2metadata-bd:latestae317d7e4724
jetty-server@9.2.10.v20150310
9.3.24.v20180605
1
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.11.v20160721
9.3.24.v20180605
1
dwimberger/ldap-ad-it:latest0c636e55eb82
jetty-server@8.1.9.v20130131
9.3.24.v20180605
1
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-server@9.4.8.v20171121
9.4.11.v20180605
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jetty-server@9.2.13.v20150730
9.3.24.v20180605
1
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.11.v20180605
1
just1not2/streama:1.10.48a2305192dec
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.11.v20180605
1
library/neo4j:3.3.0d4eaa8484246
jetty-server@9.2.22.v20170606
9.3.24.v20180605
1
library/storm:2.4.0bd5d420506d6
jetty-server@7.6.0.v20120127
9.3.24.v20180605
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
muluder/prograncontrollermcord:0.1.843b597a93da7
jetty-server@8.1.17.v20150415
9.3.24.v20180605
1
ncsa/datawolf:4.7.0af6649d59150
jetty-server@9.2.2.v20140723
9.3.24.v20180605
1
omecproject/onos-progran:1.0.05715e5648aa0
jetty-server@8.1.17.v20150415
9.3.24.v20180605
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
jetty-server@8.1.7.v20120910
9.3.24.v20180605
1
rundeck/rundeck:3.2.74d64fe56f767
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
rundeck/rundeck:3.0.16b13e8059ad72
jetty-server@8.1.15.v20140411
9.3.24.v20180605
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-server@9.2.5.v20141112
9.3.24.v20180605
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.24.v20180605
1
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.24.v20180605
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.11.v20180605
1
xetusoss/archiva:v2.2.588f25242b9ee
jetty-server@8.1.7.v20120910
9.3.24.v20180605
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.