CVE-2022-41881

A flaw was found in codec-haproxy from the Netty project. This flaw allows an attacker to build a malformed crafted message and cause infinite recursion, causing stack exhaustion and leading to a denial of service DoS...

Denial Of Service (DoS)

netty-codec-haproxy is vulnerable to Denial Of Service DoS. The vulnerability is due to a StackOverflowError in the HAProxyMessage.java as it does not properly limit the maximum nesting of TLV, allowing an attacker to cause an application crash via infinite recursion by passing a maliciously...

ai.djl.python:python (0.14.0), au.csiro.pathling:encoders (>=5.1.0, <=5.1.1) +4590 more potentially affected by CVE-2022-41881 via io.netty:netty-codec-haproxy (>=4.1.21.final, <=4.1.85.final)

io.netty:netty-codec-haproxy MAVEN version =4.1.21.final, =5.1.0, =1.0.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =0.3.28, =1.2.1, =1.2.1, =1.2.1, =1.0.1, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41881 Source advisory: OSV:GHSA-FX2C-96VJ-985V...

ai.djl.python:python (0.14.0), au.csiro.pathling:encoders (>=5.1.0, <=5.1.1) +4590 more potentially affected by CVE-2022-41881 via io.netty:netty-codec-haproxy (>=4.1.21.final, <=4.1.85.final)

io.netty:netty-codec-haproxy MAVEN version =4.1.21.final, =5.1.0, =1.0.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =0.3.28, =1.2.1, =1.2.1, =1.2.1, =1.0.1, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41881 Source advisory: GHSA-FX2C-96VJ-985V...

ai.djl.python:python (0.14.0), au.csiro.pathling:encoders (>=5.1.0, <=5.1.1) +4590 more potentially affected by CVE-2022-41881 via io.netty:netty-codec-haproxy (>=4.1.21.final, <=4.1.85.final)

io.netty:netty-codec-haproxy MAVEN version =4.1.21.final, =5.1.0, =1.0.0, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =0.3.28, =1.2.1, =1.2.1, =1.2.1, =1.0.1, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41881 Source advisory: MEND:CVE-2022-41881...