Lucene search
+L

3305 matches found

NVD
NVD
added 2024/11/12 4:15 p.m.23 views

CVE-2024-47535

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts ...

5.5CVSS0.00408EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/12 4:15 p.m.15 views

UBUNTU-CVE-2024-47535

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts ...

5.5CVSS6.8AI score0.00408EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/11/12 3:50 p.m.27 views

CVE-2024-47535 Denial of Service attack on windows app using Netty

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts ...

5.5CVSS0.00408EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/12 3:50 p.m.19 views

CVE-2024-47535 Denial of Service attack on windows app using Netty

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts ...

5.5CVSS6.6AI score0.00408EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/11/12 3:50 p.m.18 views

CVE-2024-47535

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts ...

5.5CVSS6.4AI score0.00408EPSS
SaveExploits1
OSV
OSV
added 2024/11/12 3:50 p.m.17 views

CVE-2024-47535 Denial of Service attack on windows app using Netty

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts ...

5.5CVSS6.6AI score
SaveExploits0References4
CVE
CVE
added 2024/11/12 3:50 p.m.414 views

CVE-2024-47535

CVE-2024-47535 (Netty) : Netty is vulnerable to an unsafe environment file read that can cause a denial of service. On Windows, loading Netty may try to load a non-existent file, and an attacker creating a large file can crash the application. The fixed version is 4.1.115. Remediation: upgrade to...

5.5CVSS5.1AI score0.00408EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.12 views

PT-2024-32648 · Netty +1 · Netty +1

Name of the Vulnerable Software and Affected Versions: Netty versions prior to 4.1.115 Description: The issue is related to an unsafe reading of environment files, potentially causing a denial of service in Netty. When loaded on a Windows application, Netty attempts to load a file that does not...

9.9CVSS7.4AI score0.98258EPSS
SaveExploits23References55
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.4 views

Netty 资源管理错误漏洞

Netty is a non-blocking I/O client-server framework from the Netty community that is primarily used to develop Java web applications such as protocol servers and clients. A resource management error vulnerability exists in Netty version 4.1.114 and earlier versions, which stems from allowing unsa...

5.5CVSS6.9AI score0.00408EPSS
SaveExploits1References6
OPENSUSE Linux
OPENSUSE Linux
added 2024/10/31 12:0 a.m.8 views

netty-4.1.114-1.1 on GA media (moderate)

netty-4.1.114-1.1 on GA media Announcement ID: openSUSE-SU-2024:14442-1 Rating: moderate Cross-References: CVE-2021-21409 CVE-2021-37136 CVE-2021-37137 CVE-2022-24823 CVE-2022-41881 CVE-2022-41915 CVE-2023-34462 CVE-2023-44487 CVE-2024-29025 CVSS scores: CVE-2021-21409 SUSE : 6.5...

7.5CVSS8.2AI score0.99999EPSS
SaveExploits26
OSV
OSV
added 2024/10/30 12:0 a.m.35 views

OPENSUSE-SU-2024:14442-1 netty-4.1.114-1.1 on GA media

These are all security issues fixed in the netty-4.1.114-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS8.4AI score0.99999EPSS
SaveExploits26References10
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:0 a.m.68 views

Oracle Enterprise Manager Cloud Control (October 2024 CPU)

The 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next...

9.8CVSS6.9AI score0.01433EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2024/10/08 6:33 p.m.19 views

HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS6.8AI score0.00649EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2024/10/08 6:33 p.m.12 views

GHSA-5WPR-CJ9P-959R HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

6.9CVSS5.1AI score0.00649EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/08 5:15 p.m.14 views

CVE-2024-9622

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS0.00649EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/08 5:15 p.m.5 views

UBUNTU-CVE-2024-9622

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS7.1AI score0.00649EPSS
SaveExploits0References8
CVE
CVE
added 2024/10/08 4:26 p.m.84 views

CVE-2024-9622

CVE-2024-9622 applies to the resteasy-netty4 library, where improper handling of HTTP requests containing ASCII control characters can trigger the Netty HttpObjectDecoder BAD_MESSAGE state. This causes subsequent legitimate requests on the same connection to be ignored, leading to client timeouts...

5.3CVSS5.2AI score0.00649EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/10/08 4:26 p.m.31 views

CVE-2024-9622 Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS0.00649EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/10/08 4:26 p.m.15 views

CVE-2024-9622 Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS5.2AI score0.00649EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/10/08 8:56 a.m.15 views

CVE-2024-9622

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is sent, it causes the Netty HttpObjectDecoder to transition into a BADMESSAGE state. As a result, an...

5.3CVSS6.9AI score0.00649EPSS
SaveExploits0References5
Rows per page
Query Builder