DEBIAN-CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

GHSA-WGMR-MF83-7X4J Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service

Description Invalid HTTP/2 requests for example, invalid URIs are incorrectly handled by writing a blocking error response directly from the selector thread. If the client manages to exhaust the HTTP/2 flow control window, or TCP congest the connection, the selector thread will be blocked trying ...

com.bolyartech.ezlambda:ezlambda-server (1.1.1), com.bolyartech.forge.server:forge-server-jetty (>=9.1.3, <=10.0.2) +207 more potentially affected by CVE-2022-2191 via org.eclipse.jetty:jetty-server (>=10.0.0, <=10.0.9)

org.eclipse.jetty:jetty-server MAVEN version =10.0.0, =9.1.3, =2.33, =2.33, =2.33, =1.3.6, =1.0.0, =1.0.0, =1.0.0, =4.0.0-beta.1, =4.0.0-beta.1, =4.1.0 and more Source cves: CVE-2022-2191 Source advisory: GHSA-8MPP-F3F7-XC28...

be.tomcools:dropwizard-websocket-jsr356-bundle (4.0.0-beta.1), ch.exense.rtm:rtm (3.0.0) +353 more potentially affected by CVE-2022-2191 via org.eclipse.jetty:jetty-server (>=11.0.0, <=11.0.9)

org.eclipse.jetty:jetty-server MAVEN version =11.0.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.23.0, =3.20.0, =3.20.0, =3.20.0, =3.22.0, =3.25.5 and more Source cves: CVE-2022-2191 Source advisory: GHSA-8MPP-F3F7-XC28...

be.tomcools:dropwizard-websocket-jsr356-bundle (4.0.0-beta.1), ch.exense.rtm:rtm (3.0.0) +353 more potentially affected by CVE-2022-2191 via org.eclipse.jetty:jetty-server (>=11.0.0, <=11.0.9)

org.eclipse.jetty:jetty-server MAVEN version =11.0.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.23.0, =3.20.0, =3.20.0, =3.20.0, =3.22.0, =3.25.5 and more Source cves: CVE-2022-2191 Source advisory: OSV:GHSA-8MPP-F3F7-XC28...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +37 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.0.rc0)

org.eclipse.jetty:jetty-http MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc1) +51 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.0.rc1)

org.eclipse.jetty:jetty-http MAVEN version 8.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc1) +36 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.0.rc1)

org.eclipse.jetty:jetty-http MAVEN version 7.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

com.github.stephenc.jetties:jetty-deb (8.1.6), com.github.stephenc.jetties:jetty-rpm (8.1.6) +62 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.6.v20120903)

org.eclipse.jetty:jetty-http MAVEN version 8.1.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.github.stephenc.jetties:jetty-deb 8.1.6 - com.github.stephenc.jetties:jetty-rpm 8.1.6 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc0) +50 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.5.0.rc0)

org.eclipse.jetty:jetty-http MAVEN version 7.5.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

be.tomcools:dropwizard-websocket-jsr356-bundle (4.0.0-beta.1), ch.exense.rtm:rtm (3.0.0) +353 more potentially affected by CVE-2022-2191 via org.eclipse.jetty:jetty-server (>=11.0.0, <=11.0.9)

org.eclipse.jetty:jetty-server MAVEN version =11.0.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.23.0, =3.20.0, =3.20.0, =3.20.0, =3.22.0, =3.25.5 and more Source cves: CVE-2022-2191 Source advisory: MEND:CVE-2022-2191...

com.bolyartech.ezlambda:ezlambda-server (1.1.1), com.bolyartech.forge.server:forge-server-jetty (>=9.1.3, <=10.0.2) +207 more potentially affected by CVE-2022-2191 via org.eclipse.jetty:jetty-server (>=10.0.0, <=10.0.9)

org.eclipse.jetty:jetty-server MAVEN version =10.0.0, =9.1.3, =2.33, =2.33, =2.33, =1.3.6, =1.0.0, =1.0.0, =1.0.0, =4.0.0-beta.1, =4.0.0-beta.1, =4.1.0 and more Source cves: CVE-2022-2191 Source advisory: MEND:CVE-2022-2191...

Security Bulletin: IBM Sterling Connect:Direct Browser User Interface is vulnerable to multiple vulnerabilities due to Jetty

Summary There are multiple vulnerabilities in Jetty Server. Sterling Connect:Direct Browser User Interface has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2021-28169 DESCRIPTION: Eclipse Jetty could allow a remote attacker to obtain sensitive information, caused by a flaw in th...

net.peachjean.modularwebapp:modularwebapp (1.0.0), org.apache.jena:jena-fuseki (0.2.5) +53 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 7.6.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - net.peachjean.modularwebapp:modularwebapp 1.0.0 - org.apache.jena:jena-fuseki 0.2.5 -...

org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (1.2.1), org.eclipse.jetty.aggregate:jetty-all (7.6.2.v20120308) +53 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.2.v20120308)

org.eclipse.jetty:jetty-server MAVEN version 7.6.2.v20120308 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer 1.2.1 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc0) +45 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.cometd.java:cometd-java-demo (1.0.beta8), org.cometd.java:cometd-java-oort (1.0.beta8) +18 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-demo 1.0.beta8 - org.cometd.java:cometd-java-oort 1.0.beta8 -...

org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (1.2.3), org.cometd.java:cometd-java-examples (>=2.4.3, <=2.5.0-beta2) +51 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.6.4.v20120524)

org.eclipse.jetty:jetty-server MAVEN version 7.6.4.v20120524 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer 1.2.3 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc0) +43 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.5.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)

org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...