Skip to content
Threat Feed
Subscribe

Vendor

Netty Project

4 briefs RSS
medium advisory

Netty XmlFrameDecoder CPU Exhaustion Denial of Service

An unauthenticated remote attacker can cause a Denial of Service (DoS) in Netty servers utilizing XmlFrameDecoder by sending a specially crafted XML payload containing repeated '</' characters, leading to CPU exhaustion of the server's EventLoop thread and unresponsiveness.

netty-codec-xml +1 denial-of-service cpu-exhaustion network-attack vulnerability
1t
medium advisory

Multiple Netty Vulnerabilities Enable Denial of Service Attacks

Multiple vulnerabilities in Netty can be exploited by an attacker to conduct Denial of Service (DoS) attacks, impacting the availability of services utilizing the Netty framework.

Netty denial-of-service vulnerability framework
1t
medium advisory

Netty: Multiple Vulnerabilities

An attacker can exploit multiple vulnerabilities within the Netty framework to bypass security checks, manipulate requests or headers, circumvent certificate validations, and cause a denial of service.

Netty vulnerability network denial-of-service
1t
medium advisory

Netty StompSubframeDecoder Denial of Service Vulnerability (CVE-2026-44891)

A high-severity denial of service vulnerability, identified as CVE-2026-44891, exists in the `StompSubframeDecoder` component of Netty's `netty-codec-stomp` library, allowing an unauthenticated attacker to exhaust server memory and cause an `OutOfMemoryError` by sending a STOMP message with an excessive number of headers, leading to application crashes.

netty-codec-stomp +1 denial-of-service vulnerability netty java application-layer
1t