netty: Denial of Service attack on windows app using Netty

🗓️ 30 Jun 2025 13:16:39Reported by RedHatType

Netty vulnerability on Windows causes denial of service via unsafe environment file read when a large missing file is loaded.

Reporter	Title	Published	Views	Family All 191
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by vulneralibity in netty-common-4.1.114.Final.jar	16 Apr 202505:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Netty (CVE-2024-47535)	29 Jan 202515:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Netty Common	24 Jan 202517:15	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2025.	7 Aug 202508:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Product Hub is affected by several vulnerabilities	26 Mar 202522:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Netty	16 Jun 202616:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL	23 Jan 202610:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-47535
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
github	www.github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-47535
cve	www.cve.org/CVERecord

18 Jul 2026 20:32Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5

EPSS0.00408

SSVC