Skip to content
OpenAdvisories
Medium WID-SEC-2025-2338 1 CVE

IBM Sterling Connect:Direct: Schwachstelle ermöglicht Denial of Service

Published Oct 19, 2025 · Updated Oct 19, 2025 · de-DE

Vendor: IBM Product: Sterling Connect:Direct Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Sterling Connect:Direct ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Sterling Connect:Direct ist ein Managed-File-Transfer-Produkt.

Vulnerabilities 1

  • Medium 6.9
    CVE-2025-58057

    Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below,…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References