Allocation of Resources Without Limits or Throttling

🗓️ 20 Aug 2025 20:52:17Reported by Snyk Security DatabaseType

Resource exhaustion via malformed HTTP/2 frames affecting reset streams; upgrade jetty http2 server to version 12.0.25 or 12.1.0.beta3.

Reporter	Title	Published	Views	Family All 139
IBM Security Bulletins	Security Bulletin: Due to the use of eclipse Jetty Rational Performance Tester is vulnerable to a denial of service	2 Jan 202618:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.3	7 Oct 202516:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a single vulnerability (CVE-2025-5115)	23 Apr 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by improper resource management due to Eclipse Jetty	11 Jun 202615:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Eclipse Jetty (CVE-2025-5115)	29 Sep 202521:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in http2-common (CVE-2025-5115)	10 Mar 202610:18	–	ibm
AstraLinux	Astra Linux – Vulnerability in Jetty9	20 May 202605:53	–	astralinux
FreeBSD	jenkins -- multiple vulnerabilities	17 Sep 202500:00	–	freebsd
BDU FSTEC	The vulnerability of Eclipse Jetty servlet containers, related to resource exhaustion, allows attackers to trigger a service failure.	15 Oct 202500:00	–	bdu_fstec
Chainguard	CVE-2025-5115 vulnerabilities	21 Aug 202513:17	–	cgr