Skip to content
OpenAdvisories

Package · Maven

org.eclipse.jetty.http2:http2-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2023-44487 Exploited Public exploit EPSS 100%

    HTTP/2 Stream Cancellation Attack

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL
    KEV Oct 10, 2023
  • High 7.5
    CVE-2022-2048

    Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service

    In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario w…

    The Eclipse Foundation Eclipse Jetty jetty9 jenkins Debian Ubuntu Alpine Maven