Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-37136 →
DEBIAN-CVE-2021-37136
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size us...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
netty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-6"}]}]
Debian:13
netty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-6"}]}]
Debian:14
netty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.48-6"}]}]
Références
- advisory security-tracker.debian.org