Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2026-59902

9 дней назад

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with large SCTP fragments. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2026-59902

9 дней назад

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with large SCTP fragments. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2026-59902

9 дней назад

Netty is an asynchronous, event-driven network application framework. ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-2qj4-mmr9-4v2f

9 дней назад

Netty: Memory Exhaustion in SctpMessageCompletionHandler

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with large SCTP fragments. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.

CVSS3: 7.5
0%
Низкий
9 дней назад
nvd логотип
CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with large SCTP fragments. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.

CVSS3: 7.5
0%
Низкий
9 дней назад
debian логотип
CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. ...

CVSS3: 7.5
0%
Низкий
9 дней назад
github логотип
GHSA-2qj4-mmr9-4v2f

Netty: Memory Exhaustion in SctpMessageCompletionHandler

CVSS3: 7.5
0%
Низкий
9 дней назад

Уязвимостей на страницу