Skip to content
Threat Feed
Subscribe

Product

Netty-Codec-Http3 (4.2.0.Final - 4.2.17.Final)

1 brief RSS
low advisory

Denial of Service in Netty HTTP/3 Codec via QPACK Encoder State Exhaustion

An unauthenticated remote attacker can cause heap exhaustion in applications using Netty's HTTP/3 codec by exploiting improper QPACK dynamic table state management, leading to a denial-of-service condition.

netty-codec-http3 denial-of-service vulnerability java networking
1c