Vulnerabilities > Netty

DATE CVE VULNERABILITY TITLE RISK
2024-06-04 CVE-2024-36121 Integer Overflow or Wraparound vulnerability in Netty Netty-Incubator-Codec-Ohttp
netty-incubator-codec-ohttp is the OHTTP implementation for netty.
network
low complexity
netty CWE-190
critical
 9.1
9.1
2023-10-10 CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. 7.5
7.5
2023-06-22 CVE-2023-34462 Unspecified vulnerability in Netty
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
network
low complexity
netty
6.5
6.5
2022-12-13 CVE-2022-41915 Netty project is an event-driven asynchronous network application framework.
network
low complexity
netty debian
6.5
6.5
2022-12-12 CVE-2022-41881 Uncontrolled Recursion vulnerability in multiple products
Netty project is an event-driven asynchronous network application framework.
network
low complexity
netty debian CWE-674
7.5
7.5
2022-05-06 CVE-2022-24823 Netty is an open-source, asynchronous event-driven network application framework.
local
low complexity
netty oracle netapp
5.5
5.5
2021-12-09 CVE-2021-43797 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
network
low complexity
netty quarkus netapp oracle debian
6.5
6.5
2021-10-19 CVE-2021-37136 Resource Exhaustion vulnerability in multiple products
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).
network
low complexity
netty quarkus oracle netapp debian CWE-400
7.5
7.5
2021-10-19 CVE-2021-37137 Resource Exhaustion vulnerability in multiple products
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage.
network
low complexity
netty oracle quarkus netapp debian CWE-400
7.5
7.5
2021-03-30 CVE-2021-21409 Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
network
high complexity
netty debian netapp oracle quarkus
5.9
5.9