Eclipse Jetty 安全漏洞

🗓️ 07 Jul 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 3 Views

Security vulnerability in Eclipse Jetty caused by a pooled ByteBuffer not freed by SslConnection affecting versions 10.0.0–10.0.9 and 11.0.0–11.0.9.

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Zookeeper affecting IBM QRadar User Behavior Analytics (CVE-2022-2191, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823, CVE-2020-36518)	29 Sep 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Service Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Change 5.3.2 Fix Pack 04 and earlier versions.	11 Oct 202208:56	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Performance Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Rational Synergy 7.2.2 Fix Pack 04 and earlier versions.	11 Oct 202213:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse affect IBM Installation Manager and IBM Packaging Utility	23 Apr 202519:56	–	ibm
ATTACKERKB	CVE-2022-2191	7 Jul 202221:15	–	attackerkb
BDU FSTEC	The vulnerability of the SslConnections component in Eclipse Jetty servers allows a attacker to cause a service failure.	15 Sep 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-8mpp-f3f7-xc28
security	www.security.netapp.com/advisory/ntap-20220909-0003/
packetstormsecurity	www.packetstormsecurity.com/files/170571/Red-Hat-Security-Advisory-2023-0189-01.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022072723
vigilance	www.vigilance.fr/vulnerability/Eclipse-Jetty-memory-leak-via-SslConnection-38754
cxsecurity	www.cxsecurity.com/cveshow/CVE-2022-2191/

23 May 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.01719

eclipse jetty jetty vulnerability pooled bytebuffer secure socket layer jetty versions ten zero jetty versions eleven zero