Denial Of Service

🗓️ 13 Dec 2025 05:00:47Reported by Veracode Vulnerability DatabaseType

Jetty denial of service via malformed frames triggers reset stream floods and exhausts resources.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: Due to the use of eclipse Jetty Rational Performance Tester is vulnerable to a denial of service	2 Jan 202618:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.3	7 Oct 202516:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a single vulnerability (CVE-2025-5115)	23 Apr 202618:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Eclipse Jetty (CVE-2025-5115)	29 Sep 202521:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in http2-common (CVE-2025-5115)	10 Mar 202610:18	–	ibm
AstraLinux	Astra Linux - уязвимость в jetty9	3 May 202623:59	–	astralinux
FreeBSD	jenkins -- multiple vulnerabilities	17 Sep 202500:00	–	freebsd
Chainguard	CVE-2025-5115 vulnerabilities	21 Aug 202513:17	–	cgr
Circl	CVE-2025-5115	20 Aug 202519:47	–	circl
CNNVD	Eclipse Jetty 安全漏洞	20 Aug 202500:00	–	cnnvd

Vulners

Node

eclipse jetty-http2-commonRange12.0.0.alpha0–12.0.24java

eclipse jetty-http2-commonRange12.1.0.alpha0–12.1.0.beta2java

eclipse jetty-http2-commonRange12.0.0–12.0.24java

eclipse http2-commonRange9.3.0.M0–9.4.57.v20241219java

eclipse http2-commonRange10.0.0-alpha0–10.0.25java

eclipse http2-commonRange11.0.0-alpha0–11.0.25java

eclipse http2-commonRange9.3.0–9.4.57.v20241219java

eclipse http2-commonRange10.0.0–10.0.25java

eclipse http2-commonRange11.0.0–11.0.25java

Source	Link
github	www.github.com/jetty/jetty.project/releases/tag/jetty-10.0.26
openwall	www.openwall.com/lists/oss-security/2025/08/20/4
lists	www.lists.debian.org/debian-lts-announce/2025/09/msg00014.html
github	www.github.com/jetty/jetty.project/releases/tag/jetty-9.4.58.v20250814
github	www.github.com/jetty/jetty.project/releases/tag/jetty-12.1.0
github	www.github.com/jetty/jetty.project/releases/tag/jetty-11.0.26
kb	www.kb.cert.org/vuls/id/767506
github	www.github.com/jetty/jetty.project/commit/f9ee3904788b08203ed62c95a560d951da37bdb1
github	www.github.com/jetty/jetty.project/releases/tag/jetty-12.0.25
github	www.github.com/jetty/jetty.project/pull/13449

03 Jun 2026 08:25Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 47.7

EPSS0.00529

SSVC