Описание
STOMP codec content-length long-to-int truncation causes infinite decode loop DoS
Меры по смягчению последствий
See https://github.com/netty/netty/security/advisories/GHSA-hmf3-49g9-g7qq for fixed versions and remediation guidance.
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-1035
https://bugzilla.redhat.com/show_bug.cgi?id=2536939netty: netty-codec-stomp: io.netty/netty-codec-stomp: Netty: STOMP codec content-length long-to-int truncation causes infinite decode loop DoS
Связанные уязвимости
CVSS3: 7.5
github
1 день назад
STOMP codec content-length long-to-int truncation causes infinite decode loop DoS