UpHeron
All vulnerabilities

Servers and applications

CVE-2022-2191

In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.

Severity
High 7.5
Published
7 Jul 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Eclipse JettyServers and applications · cpe:a:eclipse:jetty
  • From 10.0.0 up to 10.0.9
  • From 11.0.0 up to 11.0.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-2191
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-2191