Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/05/13 6:01 p.m.68 views

CVE-2026-42579 Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit t...

7.5CVSS0.01006EPSS
SaveExploits1References1
Rows per page
Query Builder