CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.

• CWE-410
• CWE-664

• http://www.openwall.com/lists/oss-security/2022/09/09/2Mailing List, Third Party Advisory
• https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgmr-mf83-7x4jThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/08/msg00011.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220901-0006/Third Party Advisory
• https://www.debian.org/security/2022/dsa-5198Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/09/09/2Mailing List, Third Party Advisory
• https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgmr-mf83-7x4jThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/08/msg00011.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220901-0006/Third Party Advisory
• https://www.debian.org/security/2022/dsa-5198Third Party Advisory

Published

Jul 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20474In readLazyValue of Parcel.java, there is a possible loading…7.8
• CVE-2022-20475In test of ResetTargetTaskHelper.java, there is a possible h…7.8
• CVE-2022-20476In setEnabledSetting of PackageManager.java, there is a poss…5.5
• CVE-2022-20477In shouldHideNotification of KeyguardNotificationVisibilityP…7.8
• CVE-2022-20478In NotificationChannel of NotificationChannel.java, there is…7.8
• CVE-2022-20479In NotificationChannel of NotificationChannel.java, there is…7.8
• CVE-2022-20480In NotificationChannel of NotificationChannel.java, there is…7.8
• CVE-2022-20481In multiple files, there is a possible way to preserve WiFi …5.5
• CVE-2022-20482In createNotificationChannel of NotificationManager.java, th…5.5
• CVE-2022-20483In several functions that parse avrc response in avrc_pars_c…7.5
• CVE-2022-20484In NotificationChannel of NotificationChannel.java, there is…7.8
• CVE-2022-20485In NotificationChannel of NotificationChannel.java, there is…7.8