Lucene search

K
redosRedosROS-20240514-04
HistoryMay 14, 2024 - 12:00 a.m.

ROS-20240514-04

2024-05-1400:00:00
redos.red-soft.ru
9
netty
vulnerability
interpretation conflict
uncontrolled recursion
snihandler
disclosure
modification
denial of service
resource consumption
remote attackers

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.6%

A vulnerability in the Netty networking software is associated with the occurrence of an interpretation conflict.
Exploitation of the vulnerability could allow an attacker acting remotely to disclose and modify
protected information

A vulnerability in the Netty networking software is related to uncontrolled recursion. Exploitation
exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

HttpPostRequestDecoder class vulnerability in Netty networking software is related to unrestricted resource allocation.
resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely,
cause a denial of service

Vulnerability in the SniHandler component of the Netty networking software is related to uncontrolled resource consumption.
resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64netty<= 4.1.108-1UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.6%