Lucene search
GoogleOSV:USN-6994-1HistorySep 05, 2024 - 8:39 p.m.
netty vulnerabilities
2024-09-0520:39:48
Google
osv.dev
2
netty
input parameter
request cancellation
vulnerabilities
remote attacker
denial of service
crash
cve-2023-34462
cve-2023-44487
software.
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.9
Confidence
High
EPSS
0.816
Percentile
98.4%
It was discovered that Netty did not properly sanitize its input
parameters. A remote attacker could possibly use this issue to cause a
crash. (CVE-2023-34462)
It was discovered that Netty incorrectly handled request cancellation. A
remote attacker could possibly use this issue to cause Netty to consume
resources, leading to a denial of service. (CVE-2023-44487)
Related
openvas
openvas
Ubuntu: Security Advisory (USN-6994-1)
2024-09-06 00:00:00
Debian: Security Advisory (DSA-5558-1)
2023-11-20 00:00:00
openSUSE: Security Advisory for netty, netty (SUSE-SU-2023:2974-1)
2024-03-04 00:00:00
nessus
nessus
Debian DSA-5558-1 : netty - security update
2023-11-18 00:00:00
Ubuntu 22.04 LTS : Netty vulnerabilities (USN-6994-1)
2024-09-05 00:00:00
RHEL 9 : netty (Unpatched Vulnerability)
2024-06-03 00:00:00
osv
osv
netty - security update
2023-11-18 00:00:00
netty-handler SniHandler 16MB allocation
2023-06-20 16:33:22
CGA-cp7x-r3q6-pfcj
2024-06-06 12:26:46
debian
debian
[SECURITY] [DSA 5558-1] netty security update
2023-11-18 16:33:00
[SECURITY] [DLA 3617-2] tomcat9 regression update
2023-10-16 22:23:23
[SECURITY] [DLA 3638-1] h2o security update
2023-10-31 14:09:23
debiancve
debiancve
CVE-2023-34462
2023-06-22 23:15:09
cgr
cgr
CVE-2023-34462 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2023-34462
2023-07-19 21:30:25
cve
cve
CVE-2023-34462
2023-06-22 23:15:09
github
github
netty-handler SniHandler 16MB allocation
2023-06-20 16:33:22
HTTP/2 Stream Cancellation Attack
2023-10-10 21:28:24
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
2023-10-10 22:22:54
vulnrichment
vulnrichment
CVE-2023-34462 netty-handler SniHandler 16MB allocation
2023-06-22 23:00:12
veracode
veracode
Denial Of Service (DoS)
2023-06-27 07:44:28
Denial Of Service (DoS)
2023-10-12 14:37:40
ubuntucve
ubuntucve
CVE-2023-34462
2023-06-22 00:00:00
nvd
nvd
CVE-2023-34462
2023-06-22 23:15:09
wolfi
wolfi
CVE-2023-34462 vulnerabilities
2024-09-21 03:21:11
redhat
redhat
(RHSA-2023:5946) Important: Red Hat AMQ Broker 7.11.3 release and security update
2023-10-19 18:59:57
(RHSA-2023:7653) Important: Service Registry (container images) release and security update [2.5.4 GA]
2023-12-05 14:34:51
(RHSA-2023:7334) Important: rh-varnish6-varnish security update
2023-11-16 14:38:00
cvelist
cvelist
CVE-2023-34462 netty-handler SniHandler 16MB allocation
2023-06-22 23:00:12
rosalinux
rosalinux
Advisory ROSA-SA-2023-2304
2023-12-12 12:18:26
prion
prion
Heap overflow
2023-06-22 23:15:00
cbl_mariner
cbl_mariner
CVE-2023-44487 affecting package moby-containerd-cc for versions less than 1.7.1-5
2024-02-09 19:07:07
CVE-2023-44487 affecting package vitess for versions less than 16.0.2-5
2024-02-09 19:07:07
CVE-2023-44487 affecting package terraform for versions less than 1.3.2-11
2024-02-09 19:07:07
redos
redos
ROS-20231107-01
2023-11-07 00:00:00
atlassian
atlassian
oraclelinux
oraclelinux
.NET 7.0 security update
2023-10-18 00:00:00
almalinux
almalinux
Important: dotnet6.0 security update
2023-10-16 00:00:00
Important: nghttp2 security update
2023-10-18 00:00:00
Important: varnish security update
2023-10-19 00:00:00
amazon
amazon
Important: nghttp2
2023-10-16 13:45:00
rocky
rocky
nodejs security update
2023-10-24 18:36:46
varnish security update
2023-10-24 18:36:42
varnish security update
2023-10-24 18:35:47
fedora
fedora
[SECURITY] Fedora 38 Update: fbthrift-2023.10.16.00-1.fc38
2023-10-24 01:23:49
[SECURITY] Fedora 38 Update: wangle-2023.10.16.00-1.fc38
2023-10-24 01:23:49
[SECURITY] Fedora 39 Update: proxygen-2023.10.16.00-1.fc39
2023-11-03 19:01:54
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Ietf Http
2023-12-11 23:12:03
impervablog
impervablog
Protecting Against HTTP/2 Rapid Reset: CVE-2023-44487
2023-10-10 12:24:39
ubuntu
ubuntu
.NET vulnerability
2023-10-10 00:00:00
hivepro
hivepro
HTTP2 Zero-Day Exploited for the Most Explosive DDoS Attacks
2023-10-12 08:09:28
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.9
Confidence
High
EPSS
0.816
Percentile
98.4%
Related for OSV:USN-6994-1