CVE-2022-2047

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jul 7, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-204707.8In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input v CVE-2022-204715.5In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lo CVE-2022-204729.8In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote CVE-2022-204739.8In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote CVE-2022-204747.8In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This c CVE-2022-204757.8In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused dep CVE-2022-204765.5In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhausti CVE-2022-204777.8In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic CVE-2022-204787.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-204797.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-20487.5In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up no CVE-2022-204807.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion.