Search for packages
purl | pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.18.v20190429 |
Next non-vulnerable version | 9.4.53.v20231009 |
Latest non-vulnerable version | 11.0.17 |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6y3x-kyj7-aaaf
Aliases: CVE-2023-44487 GHSA-qppj-fm5r-hxr3 VSV00013 |
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-dgvv-8aq3-aaaf
Aliases: CVE-2022-2048 GHSA-wgmr-mf83-7x4j |
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |