Denial Of Service (DoS)

🗓️ 27 Jun 2023 07:44:28Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

Vulnerability in io.netty:netty-handler leading to DoS through memory exhaustion during TLS handshakes

Reporter	Title	Published	Views	Family All 153
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities	1 Nov 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	14 Dec 202321:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Netty denial of service vulnerabilitiy [ CVE-2023-34462]	31 Jan 202413:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary Component uses netty-codec-http2-4.1.94, netty-handler-4.1.86 and netty-handler-4.1.92 which is vulnerable to CVE-2023-44487 and CVE-2023-34462	18 Jan 202412:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor with Netty is vulnerable to a denial of service	6 Feb 202416:14	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty used by IBM Maximo Asset Management (CVE-2023-34462)	26 Oct 202320:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not vulnerable to a vulnerability in Netty (CVE-2023-34462)	29 Nov 202301:11	–	ibm
IBM Security Bulletins	Security Bulletin: Netty is vulnerable to CVE-2023-34462 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202320:32	–	ibm

Vulners

Node

netty-handler netty-handlerRange4.1.0.CR1–4.1.93.Finaljava

netty-handler netty-handlerRange4.1.0.Beta4–4.1.0.Beta8java

Source	Link
github	www.github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32
github	www.github.com/advisories/GHSA-6mjq-h674-j845
github	www.github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845
security	www.security.netapp.com/advisory/ntap-20230803-0001/
security	www.security.netapp.com/advisory/ntap-20240621-0007/
debian	www.debian.org/security/2023/dsa-5558

03 Feb 2025 15:36Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00736

SSVC