Skip to content
OpenAdvisories
High DSA-5664-1 1 CVE

jetty9 - security update

Published Apr 17, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 jetty9 9.4.50-4+deb11u2
Debian · 12 jetty9 9.4.50-4+deb12u3

Vulnerabilities 1

  • High 7.5
    CVE-2024-22201

    Jetty connection leaking on idle timeout when TCP congested

    Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptor…

    jetty jetty.project jetty9 jetty Debian Ubuntu Maven