Към съдържанието
Търсене

CVE-2026-44893: netty, логическа грешка

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex(), length)` and only then reads the 1-byte client field and 4-byte verify field. If the attacker sets the TLV length below 5, the subsequent readByte/readInt throws IndexOutOfBoundsException. HAProxyMessageDecoder only catches HAProxyProtocolException around this call, so the IOOBE propagates and the retained slice on the pooled cumulation buffer is never released. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Засегнати продукти

  • netty netty: >= 4.2.0.Final, < 4.2.15.Final; < 4.1.135.Final
  • Red Hat Cryostat 4 on RHEL 9: 4.2.0-13 преди *
  • Red Hat Red Hat AMQ Broker 7.14.1: codec-haproxy преди *
  • Red Hat Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1: codec-haproxy преди *
  • Red Hat Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16: codec-haproxy преди *
  • Red Hat Red Hat build of Quarkus 3.27.4.SP1: codec-haproxy преди *
  • Red Hat Red Hat build of Quarkus 3.33.2.SP1: codec-haproxy преди *
  • Red Hat Red Hat Data Grid 8.6.2: codec-haproxy преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7: 0:2.16.0-22.redhat_00057.1.el7eap преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8: 0:2.16.0-22.redhat_00057.1.el8eap преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9: 0:2.16.0-22.redhat_00057.1.el9eap преди *
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.1: codec-haproxy преди *
  • Red Hat Streams for Apache Kafka 2.9.4: codec-haproxy преди *
  • Red Hat Streams for Apache Kafka 3.2.1: codec-haproxy преди *
  • Red Hat Red Hat OpenShift AI 2.25: 1788198681 преди *
  • Red Hat Red Hat OpenShift Dev Spaces 3.29: 1782989027 преди *
  • Red Hat OpenShift Serverless
  • Red Hat Red Hat build of Apache Camel 4 for Quarkus 3
  • Red Hat Red Hat build of Apache Camel - HawtIO 4
  • Red Hat Red Hat build of Apicurio Registry 3
  • Red Hat Red Hat build of Debezium 3
  • Red Hat Red Hat Build of Keycloak
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat Red Hat Satellite 6
  • Red Hat Red Hat Single Sign-On 7

Вид слабост

История

  • 12 юни 2026 Публикувано

Други уязвимости в netty netty

Първоизточници

CVE-2026-44893: netty, логическа грешка | freedomonline.bg