The vulnerability of the Netty network programming framework is related to an uncontrolled recursion, which allows attackers to cause service failures.

🗓️ 14 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Netty network framework has an uncontrolled recursion vulnerability that lets remote attackers cause service failures.

Reporter	Title	Published	Views	Family All 155
IBM Security Bulletins	Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by a vulnerability which can cause denial of service (CVE-2022-41881)	2 May 202312:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect watsonx.data	3 Sep 202420:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM Process Mining . CVE-2022-41881	5 May 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to denial of service and response splitting due to vulnerabilities in Netty (CVE-2022-41881 and CVE-2022-41915)	2 Mar 202315:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects watsonx.data	4 Sep 202422:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	7 Jun 202310:53	–	ibm
IBM Security Bulletins	Security Bulletin: DataPower Operations Dashboard vulnerable to multiple CVEs	12 Apr 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	29 Sep 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm

Vulners

Node

apache cassandraMatch4.1.3

OR

apache nettyRange<4.1.86

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00008.html
debian	www.debian.org/security/2023/dsa-5316
github	www.github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985v
security	www.security.netapp.com/advisory/ntap-20230113-0004/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7/
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

16 May 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.01466

netty vulnerability uncontrolled recursion remote attackers service failures