Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:54 a.m.29 views

Netty denial of service vulnerability

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service memory consumption via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames...

5CVSS6.6AI score0.04075EPSS
Exploits0References18Affected Software2
OSV
OSV
added 2022/05/13 1:54 a.m.31 views

GHSA-7VPQ-G998-QPV7 Netty denial of service vulnerability

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service memory consumption via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames...

5CVSS7.8AI score0.04075EPSS
Exploits0References18
RedHat Linux
RedHat Linux
added 2015/02/17 10:27 p.m.1 views

netty: DoS via memory exhaustion during data aggregation

A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service...

5CVSS7.2AI score0.04075EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2014/08/06 3:6 p.m.3 views

netty: DoS via memory exhaustion during data aggregation

A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service...

5CVSS7.2AI score0.04075EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2014/05/06 2:55 p.m.34 views

CVE-2014-0193

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service memory consumption via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames...

5CVSS7.1AI score0.04075EPSS
Exploits0References2
Rows per page
Query Builder