CVE-2020-2100

—

CVSS 3.1

5.8 medium

EPSS

3%p88

Published

Jan 29, 2020 (Jan 29, 2020)

Modified

Jun 17, 2026

Description

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.

Vendors: jenkins
Products: jenkins
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (3.4%)

In the news3 stories

Week in review: The future of DNS security, acquiring cyber talent in 2020, new issue of (IN)SECURE

Help Net SecurityFeb 16, 00:00 UTC · Feb 16, 2020Ransomware in the wildCVE-2020-2100

60

FBI warns cyber actors abusing protocols as new DDoS attack vectors

Security AffairsJul 27, 15:18 UTC · Jul 27, 2020Exploit / PoC CVE-2020-2100

50

12,000+ Jenkins servers can be exploited to launch, amplify DDoS attacks

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2020Vulnerability CVE-2020-2100

35