5

CVE-2014-0193

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.

Data is provided by the National Vulnerability Database (NVD)
Netty ≫ Netty Version3.6.0
Netty ≫ Netty Version3.6.1
Netty ≫ Netty Version3.6.2
Netty ≫ Netty Version3.6.3
Netty ≫ Netty Version3.6.4
Netty ≫ Netty Version3.6.5
Netty ≫ Netty Version3.6.6
Netty ≫ Netty Version3.6.7
Netty ≫ Netty Version3.6.8
Netty ≫ Netty Version3.7.0
Netty ≫ Netty Version3.8.0
Netty ≫ Netty Version3.8.1
Netty ≫ Netty Version3.9.0
Netty ≫ Netty Version4.0.0
Netty ≫ Netty Version4.0.1
Netty ≫ Netty Version4.0.2
Netty ≫ Netty Version4.0.3
Netty ≫ Netty Version4.0.4
Netty ≫ Netty Version4.0.5
Netty ≫ Netty Version4.0.6
Netty ≫ Netty Version4.0.7
Netty ≫ Netty Version4.0.8
Netty ≫ Netty Version4.0.9
Netty ≫ Netty Version4.0.10
Netty ≫ Netty Version4.0.11
Netty ≫ Netty Version4.0.12
Netty ≫ Netty Version4.0.13
Netty ≫ Netty Version4.0.14
Netty ≫ Netty Version4.0.15
Netty ≫ Netty Version4.0.16
Netty ≫ Netty Version4.0.17
Netty ≫ Netty Version4.0.18
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.42% 0.897
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P