HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
https://exchange.xforce.ibmcloud.com/vulnerabilities/15537
http://www.securityfocus.com/bid/9917
http://sourceforge.net/project/shownotes.php?release_id=224743