CLEANSTART-2026-UW60625: Netty netty-tcnative before 2
Security vulnerability affects the elasticsearch package. Netty netty-tcnative before 2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/elasticsearchto a version that resolves this vulnerability.Fixed in 9.5.5-r5
Frequently Asked Questions
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates no privileges are required and no user interaction is required. Exploitation is network-based, although it has high attack complexity.
What is the expected security impact if exploited?
The reported impact is limited to availability. The CVSS vector reports no confidentiality or integrity impact, but a high availability impact.
How can I determine whether my deployment is affected?
Check whether the cleanstart/elasticsearch package includes Netty netty-tcnative at a version earlier than 2. The advisory does not provide a more specific fixed version or affected Elasticsearch version range.