CVE-2022-2048

🗓️ 07 Jul 2022 21:15:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 46 Views

Eclipse Jetty HTTP/2 server bug in error handling leads to Denial of Servic

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: IBM Secure External Authentication Server is vulnerable to multiple issues due to Eclipse Jetty	29 Jul 202217:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Zookeeper affecting IBM QRadar User Behavior Analytics (CVE-2022-2191, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823, CVE-2020-36518)	29 Sep 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Service Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities discovered in libraries used by Apache Zookeeper that is included in ITNM (CVE-2020-36518, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823)	4 Jan 202315:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues due to Eclipse Jetty	29 Jul 202217:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	17 May 202302:32	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	17 Aug 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2023	27 Jan 202306:39	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	14.04	any	jetty	0	jetty_0_any.deb
Ubuntu	14.04	any	jetty8	0	jetty8_0_any.deb
Ubuntu	22.04	any	jetty9	0	jetty9_0_any.deb
Ubuntu	18.04	any	jetty9	0	jetty9_0_any.deb
Ubuntu	20.04	any	jetty9	0	jetty9_0_any.deb

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-wgmr-mf83-7x4j
github	www.github.com/eclipse/jetty.project/pull/7978
cve	www.cve.org/CVERecord

26 Aug 2025 12:41Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

CVSS 3.17.5

EPSS0.01818

eclipse jetty http/2 bug error handling denial of service