Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-resolver-dns

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.7
    CVE-2026-47691

    Netty has Insufficient Bailiwick Validation for NS Records

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An atta…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 8.7
    CVE-2026-45674 Public exploit

    Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Medium 6.8
    CVE-2026-45673

    Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source por…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven