CVE-2021-37137CWE-400

CVE-2021-37137: falha em The Netty project Netty

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar netty+ Monitorar netty

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 6.6%
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.
Produtos afetados
The Netty project · Netty
CVEs relacionadas — The Netty project Netty

No mesmo produto, das mais perigosas para as menos.

CVE-2021-37136—CVE-2021-37136EPSS 5.9%