Логотип exploitDog
bind:CVE-2021-37137
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-37137

Количество 7

Количество 7

ubuntu логотип

CVE-2021-37137

больше 4 лет назад

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2021-37137

больше 4 лет назад

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-37137

больше 4 лет назад

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-37137

больше 4 лет назад

The Snappy frame decoder function doesn't restrict the chunk length wh ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9vjp-v76f-g363

больше 4 лет назад

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2023-08650

больше 4 лет назад

Уязвимость функции декодирования кадров сетевого программного средства Netty, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:1271-1

почти 4 года назад

Security update for netty

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length wh ...

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
github логотип
GHSA-9vjp-v76f-g363

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
fstec логотип
BDU:2023-08650

Уязвимость функции декодирования кадров сетевого программного средства Netty, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
2%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:1271-1

Security update for netty

почти 4 года назад

Уязвимостей на страницу