Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-mm9x-g8pc-w292

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-mm9x-g8pc-w292

Denial of Service in Netty The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.

gitlab/maven/io.netty/netty-handler/CVE-2020-11612

Allocation of Resources Without Limits or Throttling The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.