CVE-2020-27218
MediumAdvisory
Published 2 Dec 2020In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.8
- base score, highest
- EPSS
- 0.083
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 59
- of 17,781 indexed, latest versions
- Container images
- 57
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Buffer not correctly recycled in Gzip Request inflation
Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 57 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jetty-servermaven | 9.4.0.v20161208, 9.4.5.v20170502, 9.4.6.v20170531, 9.4.8.v20171121+18 more | 9.4.35.v20201120 | 57 |
- OSV records
- GHSA-86wm-rrjm-8wh8
- Also known as
- BIT-kafka-2020-27218, BIT-spark-2020-27218
Charts affected
59 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| jmxproxypndaproject | 0.1.0 | 1 of 1See more | 4,177 |
| prometheus-cloudwatch-exporterprometheus-worawutchan | 0.12.0 | 1 of 1See more | 2,831 |
| sentry-dbsentry | 0.9.4 | 1 of 10See more | 10,967 |
| atlassian-confluencesomeblackmagic | 3.4.1 | 1 of 1See more | 13,605 |
| newrelic-private-minionsstarcher | 0.1.2 | 1 of 1See more | 3,164 |
| solrstatcan | 1.5.10 | 1 of 3See more | 8,806 |
| clickhousetemp-charts | 0.7.1 | 1 of 3See more | 8,707 |
| ubooquityvhdirkVerified publisher | 0.1.3 | 1 of 1See more | 4,303 |
| queryservicewbstack | 0.2.1 | 1 of 1See more | 4,649 |
Container images carrying it
57 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | b7a76ec06f68 | jetty-server | 9.4.35.v20201120 | 6 |
| selenium/ | 02f251d48d5f | jetty-server | 9.4.35.v20201120 | 3 |
| apachepulsar/ | b341ef76a852 | jetty-server | 9.4.35.v20201120 | 2 |
| library/ | 80ad2170ad62 | jetty-server | 9.4.35.v20201120 | 2 |
| linuxserver/ | 9932d6759112 | jetty-server | 9.4.35.v20201120 | 2 |
| mbentley/ | f4e682274bed | jetty-server | 9.4.35.v20201120 | 2 |
| rodolpheche/ | 3be08a386092 | jetty-server | 9.4.35.v20201120 | 2 |
| anguda/ | c435285fc241 | jetty-server | 9.4.35.v20201120 | 1 |
| apacheignite/ | d7deab68b8fa | jetty-server | 9.4.35.v20201120 | 1 |
| apache/ | 8647309f95d1 | jetty-server | 9.4.35.v20201120 | 1 |
| apache/ | 974efa2f21da | jetty-server | 9.4.35.v20201120 | 1 |
| apachepulsar/ | 4db6ff0b4045 | jetty-server | 9.4.35.v20201120 | 1 |
| apache/ | 641237e0299b | jetty-server | 9.4.35.v20201120 | 1 |
| assistiot/ | ea254b6d8a31 | jetty-server | 9.4.35.v20201120 | 1 |
| atlassian/ | 3b9222ab32ef | jetty-server | 9.4.35.v20201120 | 1 |
| bivas/ | 05545994f806 | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | f2975d507a2a | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | 8f1544df1f48 | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | 1bbda887bc53 | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | c87b1c07fb53 | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | 4bc70a83ca6f | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | b0b7aa26254a | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | ee403d5b9090 | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | b651d4b6185a | jetty-server | 9.4.35.v20201120 | 1 |
| confluentinc/ | 78c190f4472c | jetty-server | 9.4.35.v20201120 | 1 |
| craigwillis/ | ae317d7e4724 | jetty-server | 9.4.35.v20201120 | 1 |
| dniel/ | 45a667852f2a | jetty-server | 9.4.35.v20201120 | 1 |
| farberg/ | 4b4a22487394 | jetty-server | 9.4.35.v20201120 | 1 |
| fonoster/ | 2ca65af17cbc | jetty-server | 9.4.35.v20201120 | 1 |
| gchq/ | c460bb587d6d | jetty-server | 9.4.35.v20201120 | 1 |
| geonetwork/ | 20c9bb761f67 | jetty-server | 9.4.35.v20201120 | 1 |
| gocd/ | 2da45cb09d57 | jetty-server | 9.4.35.v20201120 | 1 |
| gradiant/ | e3bf364fe713 | jetty-server | 9.4.35.v20201120 | 1 |
| gradiant/ | 45eceb1bc55c | jetty-server | 9.4.35.v20201120 | 1 |
| ibmcom/ | b558f2b444ae | jetty-server | 9.4.35.v20201120 | 1 |
| jenkinsci/ | a1f33f004659 | jetty-server | 9.4.35.v20201120 | 1 |
| jingking/ | 43e74ab234e1 | jetty-server | 9.4.35.v20201120 | 1 |
| keyfactor/ | 798fbbe00283 | jetty-server | 9.4.35.v20201120 | 1 |
| library/ | a1ba477fa412 | jetty-server | 9.4.35.v20201120 | 1 |
| library/ | d124efd81fbb | jetty-server | 9.4.35.v20201120 | 1 |
| library/ | bd5d420506d6 | jetty-server | 9.4.35.v20201120 | 1 |
| library/ | 4c8a6d3b2338 | jetty-server | 9.4.35.v20201120 | 1 |
| lsmaster/ | 061eb5fbfa00 | jetty-server | 9.4.35.v20201120 | 1 |
| metabase/ | ffb2dccacefc | jetty-server | 9.4.35.v20201120 | 1 |
| mintproject/ | ffbb13f20465 | jetty-server | 9.4.35.v20201120 | 1 |
| onosproject/ | 44914a8d4b3f | jetty-server | 9.4.35.v20201120 | 1 |
| owasp/ | efc65e702ee1 | jetty-server | 9.4.35.v20201120 | 1 |
| prom/ | fc4b9b9f5e15 | jetty-server | 9.4.35.v20201120 | 1 |
| radondb/ | 16981604f1a0 | jetty-server | 9.4.35.v20201120 | 1 |
| rodolpheche/ | 2328a9fce2bf | jetty-server | 9.4.35.v20201120 | 1 |