CVE-2022-2047: Debian Linux

Low severity, CVSS 2.7. EPSS: 1.3% chance of exploitation in the next 30 days.

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Eclipse Jetty: before 9.4.46 (fixed in 9.4.46); from 10.0.0, before 10.0.9 (fixed in 10.0.9); from 11.0.0, up to and including 11.0.9
• Netapp Element Plug-In For vCenter Server: affected versions not specified
• Netapp Hci Compute Node: affected versions not specified
• Netapp Management Services For Element Software And Netapp Hci: affected versions not specified
• Netapp Snapcenter: affected versions not specified
• Netapp Solidfire & Hci Storage Node: affected versions not specified

Published 2022-07-07. Last modified 2026-06-17.