Denial Of Service

🗓️ 13 Dec 2025 05:00:47Reported by Veracode Vulnerability DatabaseType

Jetty denial of service via malformed frames triggers reset stream floods and exhausts resources.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-5115)	21 Jul 202618:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse http2-common library that could cause resource exhaustion (CVE-2025-5115).	1 Aug 202603:57	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of eclipse Jetty Rational Performance Tester is vulnerable to a denial of service	2 Jan 202618:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.3	7 Oct 202516:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a single vulnerability (CVE-2025-5115)	23 Apr 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by improper resource management due to Eclipse Jetty	11 Jun 202615:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Eclipse Jetty (CVE-2025-5115)	29 Sep 202521:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in http2-common (CVE-2025-5115)	10 Mar 202610:18	–	ibm
AstraLinux	Astra Linux – Vulnerability in Jetty9	20 May 202605:53	–	astralinux
FreeBSD	jenkins -- multiple vulnerabilities	17 Sep 202500:00	–	freebsd

Vulners

Node

eclipse jetty-http2-commonRange12.0.0.alpha0–12.0.24java

eclipse jetty-http2-commonRange12.1.0.alpha0–12.1.0.beta2java

eclipse jetty-http2-commonRange12.0.0–12.0.24java

eclipse http2-commonRange9.3.0.M0–9.4.57.v20241219java

eclipse http2-commonRange10.0.0-alpha0–10.0.25java

eclipse http2-commonRange11.0.0-alpha0–11.0.25java

eclipse http2-commonRange9.3.0–9.4.57.v20241219java

eclipse http2-commonRange10.0.0–10.0.25java

eclipse http2-commonRange11.0.0–11.0.25java

Source	Link
github	www.github.com/jetty/jetty.project/releases/tag/jetty-10.0.26
openwall	www.openwall.com/lists/oss-security/2025/08/20/4
lists	www.lists.debian.org/debian-lts-announce/2025/09/msg00014.html
github	www.github.com/jetty/jetty.project/releases/tag/jetty-9.4.58.v20250814
github	www.github.com/jetty/jetty.project/releases/tag/jetty-12.1.0
github	www.github.com/jetty/jetty.project/releases/tag/jetty-11.0.26
kb	www.kb.cert.org/vuls/id/767506
github	www.github.com/jetty/jetty.project/commit/f9ee3904788b08203ed62c95a560d951da37bdb1
github	www.github.com/jetty/jetty.project/releases/tag/jetty-12.0.25
github	www.github.com/jetty/jetty.project/pull/13449

01 Aug 2026 17:02Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 47.7

EPSS0.01625

SSVC