Skip to content
Threat Feed
Subscribe

Tag

Spdy

2 briefs RSS
medium advisory

Netty SPDY SETTINGS Frame Denial of Service Vulnerability

A high-severity vulnerability, CVE-2026-55831, in Netty's SPDY SETTINGS decoder allows a remote unauthenticated attacker to trigger a denial of service by sending a crafted SPDY/3.1 SETTINGS frame that leads to excessive heap growth and CPU consumption due to unbounded map entries in `DefaultSpdySettingsFrame`.

netty-codec-http +3 denial-of-service vulnerability netty spdy java memory-leak DoS
3t 1c 1i
high advisory

spdystream SPDY/3 Frame Parser Denial of Service

The SPDY/3 frame parser in spdystream before v0.5.1 improperly validates attacker-controlled counts and lengths, allowing a remote attacker to trigger excessive memory allocation and cause a denial-of-service condition.

spdystream spdy denial-of-service memory-allocation
2r 1t