Denial of Service attack on windows app using Netty
Résumé
Denial of Service attack on windows app using Netty
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2024-47535 netty
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com