Denial Of Service (DoS)

🗓️ 14 Feb 2025 09:36:25Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

Denial of Service vulnerability in io.netty:netty-handler due to improper input validation.

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	7 Aug 202515:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	8 Aug 202509:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	23 Jan 202611:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could cause a native crash CVE-2025-24970	26 Aug 202519:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities disclosed in Netty affect IBM SPSS Analytic Server	2 Apr 202515:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in netty-handler (CVE-2025-24970)	20 Jun 202523:11	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-handler-4.1.115.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-24970)	4 Apr 202509:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.100.Final.jar	22 May 202517:04	–	ibm

Vulners

Node

netty-handler netty-handlerRange4.1.91.Final–4.1.117.Finaljava

netty-handler netty-handlerMatch4.1.100.finaljava

netty-handler netty-handlerMatch4.1.101.finaljava

netty-handler netty-handlerMatch4.1.102.finaljava

netty-handler netty-handlerMatch4.1.103.finaljava

netty-handler netty-handlerMatch4.1.104.finaljava

netty-handler netty-handlerMatch4.1.105.finaljava

netty-handler netty-handlerMatch4.1.106.finaljava

netty-handler netty-handlerMatch4.1.107.finaljava

netty-handler netty-handlerMatch4.1.108.finaljava

netty-handler netty-handlerMatch4.1.109.finaljava

netty-handler netty-handlerMatch4.1.110.finaljava

netty-handler netty-handlerMatch4.1.111.finaljava

netty-handler netty-handlerMatch4.1.112.finaljava

netty-handler netty-handlerMatch4.1.113.finaljava

netty-handler netty-handlerMatch4.1.114.finaljava

netty-handler netty-handlerMatch4.1.115.finaljava

netty-handler netty-handlerMatch4.1.116.finaljava

netty-handler netty-handlerMatch4.1.91.finaljava

netty-handler netty-handlerMatch4.1.92.finaljava

netty-handler netty-handlerMatch4.1.93.finaljava

netty-handler netty-handlerMatch4.1.94.finaljava

netty-handler netty-handlerMatch4.1.95.finaljava

netty-handler netty-handlerMatch4.1.96.finaljava

netty-handler netty-handlerMatch4.1.97.finaljava

netty-handler netty-handlerMatch4.1.98.finaljava

netty-handler netty-handlerMatch4.1.99.finaljava

Source	Link
github	www.github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-detection
github	www.github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-mitigation
security	www.security.netapp.com/advisory/ntap-20250221-0005
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-24970
github	www.github.com/netty/netty

13 Dec 2025 04:25Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00953

SSVC