Lucene search
Redhat.comRH:CVE-2024-22201HistoryFeb 26, 2024 - 7:33 p.m.
CVE-2024-22201
2024-02-2619:33:30
redhat.com
access.redhat.com
21
jetty server
http/2
tcp congestion
connection leakage
file descriptors
A flaw was found in Jetty, a Java based web server and servlet engine. If an HTTP/2 connection gets TCP congested, it remains open and idle, and connections may be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients.
Related
cgr
cgr
CVE-2024-22201 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester/ IBM DevOps Test UI
2024-04-09 10:08:17
openvas
openvas
Debian: Security Advisory (DLA-3780-1)
2024-04-08 00:00:00
Eclipse Jetty DoS Vulnerability (GHSA-rggv-cv7r-mw98) - Linux
2024-02-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0817-1)
2024-03-11 00:00:00
freebsd
freebsd
jenkins -- HTTP/2 denial of service vulnerability in bundled Jetty
2024-03-20 00:00:00
github
github
Connection leaking on idle timeout when TCP congested
2024-02-26 20:13:46
debian
debian
[SECURITY] [DLA 3780-1] jetty9 security update
2024-04-06 21:08:10
[SECURITY] [DSA 5664-1] jetty9 security update
2024-04-17 21:54:13
osv
osv
jetty9 - security update
2024-04-06 00:00:00
Connection leaking on idle timeout when TCP congested
2024-02-26 20:13:46
jetty9 - security update
2024-04-17 00:00:00
nessus
nessus
Jenkins LTS < 2.440.2 / Jenkins weekly < 2.444
2024-03-20 00:00:00
Debian dla-3780 : jetty9 - security update
2024-04-06 00:00:00
debiancve
debiancve
CVE-2024-22201
2024-02-26 16:27:56
prion
prion
Design/Logic Flaw
2024-02-26 16:27:00
ubuntucve
ubuntucve
CVE-2024-22201
2024-02-26 00:00:00
cvelist
cvelist
CVE-2024-22201 Jetty connection leaking on idle timeout when TCP congested
2024-02-26 16:13:33
veracode
veracode
Denial Of Service
2024-02-27 10:15:06
wolfi
wolfi
CVE-2024-22201 vulnerabilities
2024-05-23 15:48:21
redos
redos
ROS-20240422-03
2024-04-22 00:00:00
cve
cve
CVE-2024-22201
2024-02-26 16:27:56
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00