Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2022-2048

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

General Information

Vendors

  • The Eclipse Foundation

Products

  • Eclipse Jetty
Technical Analysis