CVE-2025-24970

🗓️ 10 Feb 2025 21:57:28Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 527 Views

Netty vulnerability allows packet mishandling leading to crashes before version 4.1.118.Final.

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	7 Aug 202515:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	8 Aug 202509:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	23 Jan 202611:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could cause a native crash CVE-2025-24970	26 Aug 202519:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities disclosed in Netty affect IBM SPSS Analytic Server	2 Apr 202515:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in netty-handler (CVE-2025-24970)	20 Jun 202523:11	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-handler-4.1.115.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-24970)	4 Apr 202509:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.100.Final.jar	22 May 202517:04	–	ibm

NVD

Vulners

Node

netty nettyRange4.1.91–4.1.118

Node

netapp active_iq_unified_managerMatch-linux

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp oncommand_insightMatch-

[
  {
    "vendor": "netty",
    "product": "netty",
    "versions": [
      {
        "version": ">= 4.1.91.Final, <= 4.1.117.Final",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
github	www.github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
security	www.security.netapp.com/advisory/ntap-20250221-0005/
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-detection
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-mitigation

05 Sep 2025 17:20Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00953

SSVC

CWE-20