Netty

Netty

108 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-48006

  • EPSS 0.74%
  • Veröffentlicht 12.06.2026 14:36:44
  • Zuletzt bearbeitet 18.09.2026 13:18:29

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler permanently leaks pooled direct-memory buffers when a Redis pipeline connecti...

10

CVE-2026-47691

Medienbericht
  • EPSS 0.32%
  • Veröffentlicht 12.06.2026 14:33:16
  • Zuletzt bearbeitet 18.09.2026 13:18:28

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning...

5.3

CVE-2026-47244

  • EPSS 0.29%
  • Veröffentlicht 12.06.2026 14:23:50
  • Zuletzt bearbeitet 15.06.2026 02:11:37

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, DefaultHttp2Connection.DefaultEndpoint initialises maxActiveStreams/maxStreams to Integer.MAX_VALUE, and Http2...

7.5

CVE-2026-46340

  • EPSS 0.46%
  • Veröffentlicht 12.06.2026 14:19:48
  • Zuletzt bearbeitet 18.09.2026 13:18:27

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does `fragments.put(streamId...

10

CVE-2026-45674

Medienbericht
  • EPSS 0.25%
  • Veröffentlicht 12.06.2026 14:17:50
  • Zuletzt bearbeitet 18.09.2026 13:18:26

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions...

6.8

CVE-2026-45673

  • EPSS 0.26%
  • Veröffentlicht 12.06.2026 14:16:03
  • Zuletzt bearbeitet 15.06.2026 02:14:01

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP s...

4

CVE-2026-45536

  • EPSS 0.14%
  • Veröffentlicht 12.06.2026 14:12:48
  • Zuletzt bearbeitet 15.06.2026 02:14:53

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on ...

7.5

CVE-2026-45416

  • EPSS 0.86%
  • Veröffentlicht 12.06.2026 14:10:05
  • Zuletzt bearbeitet 18.09.2026 13:18:25

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in...

7.5

CVE-2026-44894

  • EPSS 0.14%
  • Veröffentlicht 12.06.2026 14:06:54
  • Zuletzt bearbeitet 15.07.2026 02:22:01

Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prior to version 4.2.15.Final, its writeToken() returns false (server will no...

7.5

CVE-2026-44893

  • EPSS 0.62%
  • Veröffentlicht 12.06.2026 14:00:25
  • Zuletzt bearbeitet 18.09.2026 13:18:25

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.reta...