CVE-2021-28165

🗓️ 01 Apr 2021 14:20:14Reported by eclipseType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 557 Views

Eclipse Jetty CPU usage can reach 100% due to large invalid TLS fram

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.	7 May 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to multiple Eclipse Jetty issues	24 Jun 202216:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (CVE-2021-28165)	1 Feb 202321:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: A CVE-2021-28165 vulnerability in Eclipse Jetty affects IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow	12 Apr 202321:48	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	29 Mar 202206:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Eclipse Jetty affect IBM Security Directory Integrator	15 May 202400:45	–	ibm

NVD

Node

eclipse jettyRange7.2.2–9.4.39

eclipse jettyRange10.0.0–10.0.2

eclipse jettyRange11.0.0–11.0.2

Node

oracle autovue_for_agile_product_lifecycle_managementMatch21.0.2

oracle communications_cloud_native_core_policyMatch1.14.0

oracle communications_element_managerMatch8.2.2

oracle communications_services_gatekeeperMatch7.0

oracle communications_session_report_managerRange8.0.0.0–8.2.4.0

oracle communications_session_route_managerRange8.0.0.0–8.2.4.0

oracle rest_data_servicesRange<21.3

oracle siebel_core_-_automationRange≤21.9

Node

jenkins jenkinsRange<2.277.3lts

jenkins jenkinsRange<2.286

Node

netapp cloud_managerRange<3.9.8

netapp e-series_performance_analyzerRange<3.0

netapp e-series_santricity_os_controllerRange11.0.0–11.70.1

netapp e-series_santricity_storageRange<1.10vcenter

netapp e-series_santricity_web_servicesRange<5.1web_services_proxy

netapp ontap_toolsRange<9.10vmware_vsphere

netapp santricity_cloud_connectorMatch-

netapp santricity_web_services_proxyRange<5.1

netapp snapcenterRange<4.6

netapp storage_replication_adapter_for_clustered_data_ontapRange<9.10vmware_vsphere

netapp vasa_provider_for_clustered_data_ontapRange<9.10

[
  {
    "product": "Eclipse Jetty",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.2.2",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.4.38",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "10.0.0.alpha0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "10.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "11.0.0.alpha0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "11.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20210611-0006/
lists	www.lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E
lists	www.lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E
oracle	www.oracle.com//security-alerts/cpujul2021.html
lists	www.lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E
lists	www.lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E
lists	www.lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E
lists	www.lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E

17 Jun 2026 03:45Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

CVSS 27.8

EPSS0.53861

SSVC

eclipse jetty cpu usage 100%invalid tls frame cve-2021-28165 nvd