Known vulnerabilities in jetty-http2-hpack

Known vulnerabilities in jetty-http2-hpack

Vendor: openEuler

Software: jetty-http2-hpack

Software CPE: cpe:2.3:o:openeuler:jetty-http2-hpack:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 12

Public exploits: 1

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU98519 - Resource exhaustion CVE-2024-6762	CWE-400	Medium	No	No	9.4.16-8	14.10.2024	SB20241014113 SB2024110897 SB2025040503 and 2 more
#VU80792 - Improper input validation CVE-2023-36479	CWE-20	Medium	No	No	9.4.16-7	14.09.2023	SB2023091440 SB2023092933 SB2023102621 and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167	CWE-444	Medium	No	No	9.4.16-7	14.09.2023	SB2023091440 SB2023092933 SB2023101760 and 68 more
#VU75218 - Resource exhaustion CVE-2023-26048	CWE-400	Medium	No	No	9.4.16-7	18.04.2023	SB2023041842 SB2023051753 SB2023060701 and 55 more
#VU65831 - Improper input validation CVE-2022-2047	CWE-20	Low	No	No	9.4.16-3	27.07.2022	SB2022072723 SB2022080103 SB2022080260 and 41 more
#VU65830 - Resource Management Errors CVE-2022-2048	CWE-399	Medium	No	No	9.4.16-3	27.07.2022	SB2022072723 SB2022080103 SB2022080260 and 44 more
#VU55642 - Insufficient Session Expiration CVE-2021-34428	CWE-613	Low	No	No	9.4.15-9	08.08.2021	SB2021080801 SB2021080803 SB2021081922 and 25 more
#VU53973 - Improper input validation CVE-2021-28169	CWE-20	Medium	No	No	9.4.15-8	09.06.2021	SB2021060910 SB2021061815 SB2021081922 and 36 more
#VU52385 - Improper input validation CVE-2020-27223	CWE-20	Medium	Available	No	9.4.15-7	21.04.2021	SB2021042107 SB2021063002 SB2021063034 and 19 more
#VU51876 - Resource exhaustion CVE-2021-28165	CWE-400	Medium	No	No	9.4.15-7	01.04.2021	SB2021040179 SB2021042208 SB2021050704 and 56 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-27216	CWE-362	Low	No	No	9.4.15-5	23.10.2020	SB2020121307 SB2020121308 SB2021012011 and 27 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-10241	CWE-79	Low	No	No	9.4.16-1	23.03.2020	SB2020032710 SB2020072802 SB2020121701 and 14 more