Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:netty:netty-Codec-Http3:4.2.17.final:*:*:*:*:*:*:*

1 brief RSS
low advisory

Denial of Service in Netty HTTP/3 Codec via QPACK Encoder State Exhaustion

An unauthenticated remote attacker can cause heap exhaustion in applications using Netty's HTTP/3 codec by exploiting improper QPACK dynamic table state management, leading to a denial-of-service condition.

netty-codec-http3 denial-of-service vulnerability java networking
1c