REDHAT-BUG-2488400: High severity Netty Netty vulnerability
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nettyto a version that resolves this vulnerability.Fixed in 4.1.135.Final - Upgrade
Upgrade
Nettyto a version that resolves this vulnerability.Fixed in 4.2.15.Final
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2488400?
The severity of REDHAT-BUG-2488400 is classified as high with a score of 7.
How do I fix REDHAT-BUG-2488400?
To fix REDHAT-BUG-2488400, upgrade to Netty versions 4.1.135.Final or 4.2.15.Final.
What is the impact of not addressing REDHAT-BUG-2488400?
Failing to address REDHAT-BUG-2488400 may lead to DNS response validation issues, potentially allowing for DNS spoofing attacks.
What software is affected by REDHAT-BUG-2488400?
The affected software in REDHAT-BUG-2488400 is the Netty framework.
What was the issue caused by REDHAT-BUG-2488400?
The issue caused by REDHAT-BUG-2488400 involves the DnsResolveContext failing to validate the origin of CNAME records in DNS responses.