Denial of Service attack on windows app using Netty
概要
Denial of Service attack on windows app using Netty
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Ubuntu UBUNTU-CVE-2024-47535 netty
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com