Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-47535

Опубликовано: 12 нояб. 2024
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*
Версия до 4.1.115 (исключая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00198
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 1 года назад

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.

CVSS3: 5.5
redhat
около 1 года назад

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.

CVSS3: 5.5
debian
около 1 года назад

Netty is an asynchronous event-driven network application framework fo ...

suse-cvrf
около 1 года назад

Security update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative

CVSS3: 5.5
github
около 1 года назад

Denial of Service attack on windows app using netty

EPSS

Процентиль: 42%
0.00198
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400