CVE-2022-2048

Published: Jul 7, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.

Affected (12)

Products: Eclipse: Jetty · Debian: Debian Linux · Netapp: Element Plug In For Vcenter Server, Hci Compute Node, Management Services For Element Software And Netapp Hci, Snapcenter, Solidfire & Hci Storage Node · +1 more

Show all products

Eclipse: Jetty · Debian: Debian Linux · Netapp: Element Plug In For Vcenter Server, Hci Compute Node, Management Services For Element Software And Netapp Hci, Snapcenter, Solidfire & Hci Storage Node · Jenkins: Jenkins

1 product

1 product

5 products

Element Plug In For Vcenter Server

Hci Compute Node

Management Services For Element Software And Netapp Hci

Snapcenter

Solidfire & Hci Storage Node

Jenkins

1 product

Jenkins

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Eclipse Jetty	Before 9.4.47
Eclipse Jetty	From 10.0.0 to 10.0.9
Eclipse Jetty	From 11.0.0 to 11.0.9

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Element Plug In For Vcenter Server	All versions
Netapp Hci Compute Node	All versions
Netapp Management Services For Element Software And Netapp Hci	All versions
Netapp Snapcenter	All versions
Netapp Solidfire & Hci Storage Node	All versions