REDHAT-BUG-2488441: High severity Netty Netty HTTP/3 codec vulnerability
Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, a memory exhaustion vulnerability in the Netty HTTP/3 codec allows the creation of an infinite number of blocked streams, which can cause OOM error. Version 4.2.15.Final patches the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Netty HTTP/3 codecto a version that resolves this vulnerability.Fixed in 4.2.15.Final
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2488441?
The severity of REDHAT-BUG-2488441 is classified as high with a risk score of 7.
What is the main issue described in REDHAT-BUG-2488441?
REDHAT-BUG-2488441 describes a memory exhaustion vulnerability in the Netty HTTP/3 codec that can create an infinite number of blocked streams.
How do I fix REDHAT-BUG-2488441?
To fix REDHAT-BUG-2488441, update to Netty version 4.2.15.Final or later, which patches the vulnerability.
Which software is affected by REDHAT-BUG-2488441?
REDHAT-BUG-2488441 affects the Netty HTTP/3 codec within the Netty framework.
What type of vulnerability is REDHAT-BUG-2488441?
REDHAT-BUG-2488441 is a memory exhaustion vulnerability that can lead to out-of-memory (OOM) errors.