Netty

Netty

108 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-55831

Exploit
  • EPSS 0.42%
  • Veröffentlicht 20.07.2026 23:00:31
  • Zuletzt bearbeitet 23.07.2026 15:17:16

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and mate...

7.5

CVE-2026-44891

Exploit
  • EPSS 0.42%
  • Veröffentlicht 17.07.2026 20:16:24
  • Zuletzt bearbeitet 23.07.2026 13:35:01

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.stomp.StompSubframeDecoder fails to limit the total number of headers or their cumulative size p...

5.3

CVE-2026-50560

  • EPSS 0.3%
  • Veröffentlicht 12.06.2026 14:59:59
  • Zuletzt bearbeitet 15.06.2026 02:30:57

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling produces an attack similar to HTTP/2 Rapid Reset. There is a setting in ...

5.3

CVE-2026-50020

  • EPSS 0.23%
  • Veröffentlicht 12.06.2026 14:55:32
  • Zuletzt bearbeitet 15.06.2026 02:31:10

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, before reading the first request-line, `HttpObjectDecoder` skips every byte for which `Character.isISOControl(...

7.5

CVE-2026-50011

  • EPSS 0.46%
  • Veröffentlicht 12.06.2026 14:52:18
  • Zuletzt bearbeitet 18.09.2026 13:18:32

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count decla...

7.5

CVE-2026-50010

  • EPSS 0.46%
  • Veröffentlicht 12.06.2026 14:50:43
  • Zuletzt bearbeitet 18.09.2026 13:18:31

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustMan...

4.8

CVE-2026-50009

  • EPSS 0.2%
  • Veröffentlicht 12.06.2026 14:47:09
  • Zuletzt bearbeitet 15.06.2026 02:31:31

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-re...

7.5

CVE-2026-48748

  • EPSS 0.39%
  • Veröffentlicht 12.06.2026 14:45:04
  • Zuletzt bearbeitet 04.08.2026 22:17:15

Netty is a network application framework for development of protocol servers and clients. Starting in version 4.2.0.Final and prior to version 4.2.15.Final, a memory exhaustion vulnerability in the Netty HTTP/3 codec allows the creation of an infinit...

7.5

CVE-2026-48059

  • EPSS 0.63%
  • Veröffentlicht 12.06.2026 14:42:44
  • Zuletzt bearbeitet 18.09.2026 13:18:30

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sen...

7.5

CVE-2026-48043

  • EPSS 0.62%
  • Veröffentlicht 12.06.2026 14:39:52
  • Zuletzt bearbeitet 18.09.2026 13:18:30

Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDecompressorFrameListener` class orchestrates HTTP/2 decompression by embe...