Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 5 | AV:N/AC:L/Au:N/C:N/I:N/A:P | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Netty>>Netty >> Version 3.6.0
- Netty>>Netty >> Version 3.6.0 (Open CPE detail)
- Netty>>Netty >> Version 3.6.0 (Open CPE detail)
- Netty>>Netty >> Version 3.6.0 (Open CPE detail)
Netty>>Netty >> Version 3.6.1
- Netty>>Netty >> Version 3.6.1 (Open CPE detail)
Netty>>Netty >> Version 3.6.2
- Netty>>Netty >> Version 3.6.2 (Open CPE detail)
Netty>>Netty >> Version 3.6.3
- Netty>>Netty >> Version 3.6.3 (Open CPE detail)
Netty>>Netty >> Version 3.6.4
- Netty>>Netty >> Version 3.6.4 (Open CPE detail)
Netty>>Netty >> Version 3.6.5
- Netty>>Netty >> Version 3.6.5 (Open CPE detail)
Netty>>Netty >> Version 3.6.6
- Netty>>Netty >> Version 3.6.6 (Open CPE detail)
Netty>>Netty >> Version 3.6.7
- Netty>>Netty >> Version 3.6.7 (Open CPE detail)
Netty>>Netty >> Version 3.6.8
- Netty>>Netty >> Version 3.6.8 (Open CPE detail)
Netty>>Netty >> Version 3.7.0
- Netty>>Netty >> Version 3.7.0 (Open CPE detail)
Netty>>Netty >> Version 3.8.0
- Netty>>Netty >> Version 3.8.0 (Open CPE detail)
Netty>>Netty >> Version 3.8.1
- Netty>>Netty >> Version 3.8.1 (Open CPE detail)
Netty>>Netty >> Version 3.9.0
- Netty>>Netty >> Version 3.9.0 (Open CPE detail)
Netty>>Netty >> Version 4.0.0
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
- Netty>>Netty >> Version 4.0.0 (Open CPE detail)
Netty>>Netty >> Version 4.0.1
- Netty>>Netty >> Version 4.0.1 (Open CPE detail)
Netty>>Netty >> Version 4.0.2
- Netty>>Netty >> Version 4.0.2 (Open CPE detail)
Netty>>Netty >> Version 4.0.3
- Netty>>Netty >> Version 4.0.3 (Open CPE detail)
Netty>>Netty >> Version 4.0.4
- Netty>>Netty >> Version 4.0.4 (Open CPE detail)
Netty>>Netty >> Version 4.0.5
- Netty>>Netty >> Version 4.0.5 (Open CPE detail)
Netty>>Netty >> Version 4.0.6
- Netty>>Netty >> Version 4.0.6 (Open CPE detail)
Netty>>Netty >> Version 4.0.7
- Netty>>Netty >> Version 4.0.7 (Open CPE detail)
Netty>>Netty >> Version 4.0.8
- Netty>>Netty >> Version 4.0.8 (Open CPE detail)
Netty>>Netty >> Version 4.0.9
- Netty>>Netty >> Version 4.0.9 (Open CPE detail)
Netty>>Netty >> Version 4.0.10
- Netty>>Netty >> Version 4.0.10 (Open CPE detail)
Netty>>Netty >> Version 4.0.11
- Netty>>Netty >> Version 4.0.11 (Open CPE detail)
Netty>>Netty >> Version 4.0.12
- Netty>>Netty >> Version 4.0.12 (Open CPE detail)
Netty>>Netty >> Version 4.0.13
- Netty>>Netty >> Version 4.0.13 (Open CPE detail)
Netty>>Netty >> Version 4.0.14
- Netty>>Netty >> Version 4.0.14 (Open CPE detail)
- Netty>>Netty >> Version 4.0.14 (Open CPE detail)
- Netty>>Netty >> Version 4.0.14 (Open CPE detail)
Netty>>Netty >> Version 4.0.15
- Netty>>Netty >> Version 4.0.15 (Open CPE detail)
Netty>>Netty >> Version 4.0.16
- Netty>>Netty >> Version 4.0.16 (Open CPE detail)
Netty>>Netty >> Version 4.0.17
- Netty>>Netty >> Version 4.0.17 (Open CPE detail)
Netty>>Netty >> Version 4.0.18
- Netty>>Netty >> Version 4.0.18 (Open CPE detail)
References
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
2025©
tesweb SA
