Netty

Netty

92 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-56817

  • EPSS 0.37%
  • Veröffentlicht 21.07.2026 22:06:56
  • Zuletzt bearbeitet 30.07.2026 14:48:18

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any caller that can deliver bytes to a Netty channel pipeline containing `Xm...

7.5

CVE-2026-56745

  • EPSS 0.61%
  • Veröffentlicht 21.07.2026 21:31:25
  • Zuletzt bearbeitet 30.07.2026 14:46:55

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the `SpdyHttpDecoder` handler in Netty's SPDY-to-HTTP codec allocates a pool...

7.5

CVE-2026-55851

  • EPSS 0.61%
  • Veröffentlicht 21.07.2026 21:22:34
  • Zuletzt bearbeitet 30.07.2026 14:48:31

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to (but not including) 4.2.16.Final, and 4.1.0.Final up to (but not including) 4.1.135, the `HAProxyMessageDecoder` in Netty's `codec...

7.5

CVE-2026-55833

Exploit
  • EPSS 0.42%
  • Veröffentlicht 20.07.2026 23:18:07
  • Zuletzt bearbeitet 23.07.2026 13:34:45

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded `...

7.5

CVE-2026-55831

Exploit
  • EPSS 0.42%
  • Veröffentlicht 20.07.2026 23:00:31
  • Zuletzt bearbeitet 23.07.2026 15:17:16

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and mate...

7.5

CVE-2026-44891

Exploit
  • EPSS 0.42%
  • Veröffentlicht 17.07.2026 20:16:24
  • Zuletzt bearbeitet 23.07.2026 13:35:01

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.stomp.StompSubframeDecoder fails to limit the total number of headers or their cumulative size p...

5.3

CVE-2026-50560

  • EPSS 0.3%
  • Veröffentlicht 12.06.2026 14:59:59
  • Zuletzt bearbeitet 15.06.2026 02:30:57

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling produces an attack similar to HTTP/2 Rapid Reset. There is a setting in ...

5.3

CVE-2026-50020

  • EPSS 0.23%
  • Veröffentlicht 12.06.2026 14:55:32
  • Zuletzt bearbeitet 15.06.2026 02:31:10

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, before reading the first request-line, `HttpObjectDecoder` skips every byte for which `Character.isISOControl(...

7.5

CVE-2026-50011

  • EPSS 0.46%
  • Veröffentlicht 12.06.2026 14:52:18
  • Zuletzt bearbeitet 12.08.2026 12:19:40

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count decla...

7.5

CVE-2026-50010

  • EPSS 0.46%
  • Veröffentlicht 12.06.2026 14:50:43
  • Zuletzt bearbeitet 20.08.2026 13:18:59

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustMan...