CVE-2020-27218
MediumAdvisory
Published 2 Dec 2020In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.8
- base score, highest
- EPSS
- 0.083
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 59
- of 17,781 indexed, latest versions
- Container images
- 57
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Buffer not correctly recycled in Gzip Request inflation
Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 57 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jetty-servermaven | 9.4.0.v20161208, 9.4.5.v20170502, 9.4.6.v20170531, 9.4.8.v20171121+18 more | 9.4.35.v20201120 | 57 |
- OSV records
- GHSA-86wm-rrjm-8wh8
- Also known as
- BIT-kafka-2020-27218, BIT-spark-2020-27218
Charts affected
59 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| jmxproxypndaproject | 0.1.0 | 1 of 1See more | 4,177 |
| prometheus-cloudwatch-exporterprometheus-worawutchan | 0.12.0 | 1 of 1See more | 2,831 |
| sentry-dbsentry | 0.9.4 | 1 of 10See more | 10,967 |
| atlassian-confluencesomeblackmagic | 3.4.1 | 1 of 1See more | 13,605 |
| newrelic-private-minionsstarcher | 0.1.2 | 1 of 1See more | 3,164 |
| solrstatcan | 1.5.10 | 1 of 3See more | 8,806 |
| clickhousetemp-charts | 0.7.1 | 1 of 3See more | 8,707 |
| ubooquityvhdirkVerified publisher | 0.1.3 | 1 of 1See more | 4,303 |
| queryservicewbstack | 0.2.1 | 1 of 1See more | 4,649 |
Container images carrying it
57 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| rundeck/ | 4d64fe56f767 | jetty-server | 9.4.35.v20201120 | 1 |
| rundeck/ | b13e8059ad72 | jetty-server | 9.4.35.v20201120 | 1 |
| thelastpickle/ | 9c53996c457d | jetty-server | 9.4.35.v20201120 | 1 |
| vromero/ | 408d6a46b153 | jetty-server | 9.4.35.v20201120 | 1 |
| ghcr.io/ | 8caf5289fe73 | jetty-server | 9.4.35.v20201120 | 1 |
| ghcr.io/ | b83b5b81d4b6 | jetty-server | 9.4.35.v20201120 | 1 |
| quay.io/ | 98c26e1b8f70 | jetty-server | 9.4.35.v20201120 | 1 |