CVE-2004-2381: Jetty HTTP Server

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.

Affected products

• Jetty Jetty HTTP Server: version 4.0.0 only; version 4.0.1 only; version 4.0.1_rc0 only; version 4.0.1_rc1 only; version 4.0.1_rc2 only; version 4.0.2 only; …

Published 2004-12-31. Last modified 2026-06-16.