Denial Of Service

🗓️ 29 Nov 2023 09:58:16Reported by Veracode Vulnerability DatabaseType

Reactor Netty HTTP Server vulnerability to Denial Of Service due to improper HTTP request validation when micrometer integration enabled.

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	26 Mar 202504:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Cloud Gateway Server, Bouncy Castle, Reactor Netty HTTP Server, NPM and Apache Commons might affect IBM Storage Defender Copy Data Management	30 Sep 202521:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for January 2024 - Multiple CVEs addressed	15 Apr 202502:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector includes components with known vulnerabilities	11 Apr 202421:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	16 Feb 202408:48	–	ibm
Chainguard	CVE-2023-34054 vulnerabilities	28 Nov 202309:15	–	cgr
Circl	CVE-2023-34054	17 Dec 202317:12	–	circl
CNNVD	Reactor Netty Security Vulnerability	28 Nov 202300:00	–	cnnvd
CVE	CVE-2023-34054	28 Nov 202308:16	–	cve

Vulners

Node

Source	Link
github	www.github.com/reactor/reactor-netty/commit/37dc8a2ef6514cd7834e75e7f3faf0b9ea044c88
github	www.github.com/advisories/GHSA-q24v-hpg3-v3jp
spring	www.spring.io/security/cve-2023-34054

28 Feb 2025 06:36Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.3 - 7.5

EPSS0.0017