← العودة للجدول
CVE-2026-44893
CVE-2026-44893 — Netty is a network application framework for development of protocol servers and
📅 2026-06-12
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 7.5

📋 الوصف الكامل

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex(), length)` and only then reads the 1-byte client field and 4-byte verify field. If the attacker sets the TLV length belo

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-44893

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.1.135

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←