Skip to content
Threat Feed
Subscribe

Product

Netty-Codec-Stomp (<= 4.1.137.Final, 4.2.0.Final - 4.2.17.Final)

1 brief RSS
medium threat

Denial of Service via ByteBuf Memory Leak in Netty STOMP Codec

An unauthenticated remote attacker can cause cumulative memory exhaustion and service denial by sending incomplete STOMP frames that trigger a buffer leak in Netty's StompSubframeDecoder.

exploited netty-codec-stomp
1c