CVE-2020-11612
—CVSS 3.1
7.5 high
EPSS
9%p95
Published
()
Modified
Description
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
- Vendors
- nettydebianfedoraprojectnetapporacle
- Products
- netty, debian linux, fedora, oncommand api services, oncommand insight, oncommand workflow automation, communications brm - elastic charging engine, communications cloud native core service communication proxy, communications design studio, nosql database, siebel core - server framework, webcenter portal
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.