Homepage

io.netty:netty-common@4.2.0.Alpha5 vulnerabilities

  • latest version

    4.1.117.Final

  • latest non vulnerable version

    5.0.0.Alpha2

  • first published

    12 years ago

  • latest version published

    1 months ago

  • licenses detected

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the io.netty:netty-common package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Improper Validation of Specified Quantity in Input

    Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in BufferedReader.readLine(), which does not count null bytes when calculating the acceptable size of an input stream. An attacker can cause the application to crash by creating a large file in C:\etc\os-release or C:\usr\lib\os-release which the application attempts to load. If the file exceeds the JVM's memory limit (1 GB by default) the application will crash when loading it into memory.

    Note: This vulnerability affects only Windows environments and is a bypass for the previously reported and fixed CVE-2024-47535.

    How to fix Improper Validation of Specified Quantity in Input?

    Upgrade io.netty:netty-common to version 4.1.118, 4.2.0.RC3 or higher.

    [,4.1.118)[4.2.0.Alpha1,4.2.0.RC3)
    Go back to all versions of this package