CVE-2014-0193

netty: DoS via memory exhaustion during data aggregation

Published May 6, 2014 CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Description
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2110-1 netty-3.9 security update
EUVD EUVD EUVD-2022-3068 WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
Github GHSA Github GHSA GHSA-7vpq-g998-qpv7 Netty denial of service vulnerability
History

No history.