Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 92
Filter zurücksetzenNetty: Denial of Service via Unbounded Headers in StompSubframeDecoder
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length
Netty: Wrapping plain trust manager silently disables hostname verification
Netty: QUIC stateless reset token material exposed through header-visible connection IDs
Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
Netty has Insufficient Bailiwick Validation for NS Records
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
Netty: SCTP reassembly nests buffers without bound
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Netty's Default QUIC token handler accepts any client-supplied token
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.