CVE-2022-2191
CVE-2022-2191
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.
CVSS 7.5 · High · EPSS 2.2%
- Published
- Updated
Stack: system
Affected products and versions
eclipse jetty
- Versions
- ≥ 10.0.0, < unspecified: Affected (custom)
- ≥ unspecified, ≤ 10.0.9: Affected (custom)
- ≥ 11.0.0, < unspecified: Affected (custom)
- ≥ unspecified, ≤ 11.0.9: Affected (custom)
No fix published
jetty Ubuntu:14.04:LTS
- Versions
- 6.1.26-1ubuntu1
- 6.1.26-1ubuntu1.1
- 6.1.26-1ubuntu1.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty8 Ubuntu:14.04:LTS
- Versions
- 8.1.3-8
- 8.1.3-9
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty Ubuntu:16.04:LTS
- Versions
- 6.1.26-5
- 6.1.26-5ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
jetty8 Ubuntu:16.04:LTS
- Versions
- 8.1.17-2
- 8.1.18-1
- 8.1.18-2
- 8.1.18-3
- 8.1.19-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published