← Back to browse · API

CVE-2021-28165

Severity
HIGH
CVSS
7.5
EPSS
0.53861
Risk score
48.85
CISA KEV
No
PoC
No
Published
2021-04-01
Modified
2025-08-27
First seen
2026-08-07
Aliases
EUVD-2021-0735, GHSA-26VR-8J45-3R4W
Products
Eclipse Foundation:Eclipse Jetty 10.0.0.alpha0 <unspecified, Eclipse Foundation:Eclipse Jetty 11.0.0.alpha0 <unspecified, Eclipse Foundation:Eclipse Jetty 7.2.2 <unspecified, Eclipse Foundation:Eclipse Jetty unspecified ≤10.0.1, Eclipse Foundation:Eclipse Jetty unspecified ≤11.0.1, Eclipse Foundation:Eclipse Jetty unspecified ≤9.4.38
Sources
euvd EUVD-2021-0735

Description

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.

References