● CVE — High
CVE-2020-11612
Vendordebian, fedoraproject, netty, netapp, oracleProductdebian linux, fedora, netty, oncommand insight, oncommand workflow automation, webcenter portal, oncommand api services, siebel core - server framework, communications design studio, communications brm - elastic charging engine, nosql database, communications messaging server, communications cloud native core service communication proxyDiscoveredApr 7, 2020UpdatedNov 21, 2024
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.