← Database

CVE-2022-2048

HIGH CVSS: 7.5 Published: 2022-07-07 Modified: 2026-06-17

Description

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.

Affected Platforms

Netapp Element Plug-In For Vcenter ServerNetapp SnapcenterNetapp Solidfire \& Hci Storage NodeEclipse JettyNetapp Hci Compute NodeDebian Debian LinuxJenkins JenkinsNetapp Management Services For Element Software And Netapp Hci

Weakness Type

CWE-410, CWE-664, NVD-CWE-Other

References