Beveiligingsadvies

CVE-2026-44250

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-11 20:49:00
Laatst bijgewerkt 2026-09-09 12:05:01
Toegewezen door GitHub_M
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the server to allocate a massive number of state objects and collections, leading to memory exhaustion and an OutOfMemoryError. Versions 4.1.135.Final and 4.2.15.Final patch the issue.