Netty Buffer Overflow Vulnerability

🗓️ 08 Apr 2020 00:00:00Reported by China National Vulnerability DatabaseType

Netty 4.1.x before 4.1.46 has ZlibDecoders allocation flaw enabling DoS via ZlibEncoded streams.

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects watsonx.data	16 Sep 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a Netty vulnerability (CVE-2020-11612)	27 Sep 202018:10	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability have been identified in Netty shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2020-11612)	21 Aug 202008:53	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Netty affects IBM Netcool Agile Service Manager	30 Sep 202017:41	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)	26 May 202015:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty 4.1.x before 4.1.46 affects IBM Operations Analytics Predictive Insights (CVE-2020-11612)	26 Aug 202008:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm

Vulners

Node

netty *_<46Range<4.1.46

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-11612

21 Jun 2020 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 25

CVSS 3.17.5

EPSS0.09438