← العودة للجدول
CVE-2026-45416
CVE-2026-45416 — Netty is a network application framework for development of protocol servers and
📅 2026-06-12
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 7.5

📋 الوصف الكامل

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly allocates `ctx.alloc().buffer(handshakeLength)` (line 161). The guard at line 140 is `handshakeLength > maxClientHelloLe

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-45416

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.1.135

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←