CLEANSTART-2026-MH05121 Netty is a network application framework for development of protocol servers and clients

CVE-2026-45673 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

Security Bulletin: There is a vulnerability in netty-resolver-dns-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45673, CVE-2026-45674, CVE-2026-47691)

Summary There is a vulnerability in netty-resolver-dns-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior t...

CVE-2026-45673

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source port. This combination reduces the entrop...

CVE-2026-45673

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source port. This combination reduces the entrop...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3718 more potentially affected by CVE-2026-45673 via io.netty:netty-resolver-dns (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-resolver-dns MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-45673 Source advisory: MEND:CVE-2026-45673...

Linux Distros Unpatched Vulnerability : CVE-2026-45673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver...

CVE-2026-45673 vulnerabilities

Vulnerabilities for packages: celeborn, apicurio-registry, strimzi-kafka-operator, infinispan, wildfly, apache-nifi, management-api-for-apache-cassandra-5.0, zipkin, opensearch, akhq, apache-pulsar, flyway, druid, trino, keycloak, spark, thingsboard, sonarqube, tez, selenium...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3718 more potentially affected by CVE-2026-45673 via io.netty:netty-resolver-dns (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-resolver-dns MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-45673 Source advisory: SNYK:JAVA-IONETTY-17261131...