CVE-2020-11612 — Denial of Service in Netty

Description

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	netty	1:4.1.48-1	—
Debian 13	netty	1:4.1.48-1	—
Debian 12	netty	1:4.1.48-1	—
Debian 10	netty	1:4.1.33-1+deb10u2	DSA-4885-1
Debian 9	netty	1:4.1.7-2+deb9u2	DLA-2364-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 22.04 LTS	netty	1:4.1.48-4+deb11u1build0.22.04.1	USN-6049-1
Ubuntu 18.04 LTS	netty	1:4.1.7-4ubuntu0.1	USN-4600-2

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 20.04 LTS	netty	1:4.1.45-1ubuntu0.1~esm1	USN-6049-1
Ubuntu Pro 18.04 LTS	netty	1:4.1.7-4ubuntu0.1+esm2	USN-6049-1
Ubuntu Pro 16.04 LTS	netty	1:4.0.34-1ubuntu0.1~esm1	USN-6049-1
Ubuntu Pro 14.04 LTS	netty	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite	2.0.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	ansible-runner +1	1.4.6-1.el7ar	RHSA-2021:1313
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.7.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	ansiblerole-satellite-receptor-installer	0.6.13-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	crane-selinux +1	3.5.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	createrepo_c +1	0.17.1-1.el7pc	RHSA-2021:1313
Red Hat Satellite Capsule 6	foreman +1	2.3.1.20-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	202005201200-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	foreman-discovery-image	1:3.7.4-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	foreman-discovery-image-service +1	1.0.0-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	foreman-installer +1	1:2.3.1.10-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	foreman-proxy +3	2.3.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	future +1	0.16.0-11.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	gofer +2	2.12.5-7.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	hfsplus-tools	332.14-12.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	katello +3	3.18.1-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	katello-certs-tools	2.7.3-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.5-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	kobo	0.5.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	libmodulemd	1.7.0-1.pulp.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	libsolv +1	0.7.12-2.el7pc	RHSA-2021:1313
Red Hat Satellite Capsule 6	libwebsockets	2.4.2-2.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	livecd-tools +1	1:20.4-1.6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	mod_xsendfile	0.12-11.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	ostree	2017.1-2.atomic.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	pulp +23	2.21.5-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	pulp-docker +3	3.2.9-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	pulp-katello	1.0.3-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	pulp-ostree +3	1.3.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	puppet-agent	6.19.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.1-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	0.4.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	puppetlabs-stdlib	5.2.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	puppetserver	6.14.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	pycairo	1.16.3-9.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	pygobject3 +2	3.28.3-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-amqp +1	2.2.2-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-anyjson +1	0.3.3-11.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-billiard +1	1:3.5.0.3-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-blinker	1.3-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-bson +2	3.2-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-celery +1	4.0.2-9.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-click +1	6.7-9.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-crane +1	3.3.1-9.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-daemon +1	2.1.2-7.el7at	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-django +1	1.11.29-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-flask +1	1:0.12.2-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-gnupg	0.3.7-1.el7ui	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-isodate +1	0.5.4-12.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-itsdangerous +1	0.24-15.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-jinja2 +1	2.10-10.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-jmespath +1	0.9.0-6.el7_7	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-kid	0.9.6-11.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-kombu +1	10:4.0.2-14.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-lockfile +1	1:0.11.0-10.el7ar	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-markupsafe +1	0.23-21.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-mongoengine	0.10.5-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-nectar	1.6.4-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-oauth2	1.5.211-8.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-okaara +1	1.0.37-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-pexpect +1	4.6-1.el7at	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-psutil +1	5.7.2-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-ptyprocess +1	0.5.2-3.el7at	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-pycurl +1	7.43.0.2-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-qpid	1.35.0-5.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-semantic_version	2.2.0-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-simplejson	3.2.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-twisted +1	16.4.1-12.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-vine +1	10:1.1.3-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-werkzeug +1	0.12.2-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	python-zope-interface	4.0.5-4.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	qpid-cpp +6	1.36.0-28.el7amq	RHSA-2021:1313
Red Hat Satellite Capsule 6	qpid-dispatch +2	1.5.0-4.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	qpid-proton +2	0.28.0-4.el7	RHSA-2021:1313
Red Hat Satellite Capsule 6	redhat-access-insights-puppet	1.0.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	repoview	0.6.6-11.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	rubygem-fast_gettext +1	1.1.0-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	rubygem-highline	1.7.8-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	rubygem-oauth	0.5.4-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	saslwrapper +1	0.22-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	satellite +3	6.9.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	satellite-installer	6.9.0.10-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm +1	6.1-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-algebrick	0.7.3-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-ansi	1.5.0-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-apipie-params	0.0.5-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-bundler_ext	0.4.1-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-clamp	1.1.2-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-concurrent-ruby	1:1.1.6-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-concurrent-ruby-edge	1:0.6.0-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-domain_name	0.5.20160310-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-dynflow	1.4.7-1.fm2_1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-excon	0.76.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-faraday	0.17.3-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-faraday_middleware	0.13.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-fast_gettext	1.4.1-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-ffi	1.12.2-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-foreman-tasks-core	0.3.4-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-foreman_ansible_core	4.0.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-foreman_remote_execution_core	1.4.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-gssapi	1.2.0-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-hashie	3.6.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-highline	1.7.8-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-http-cookie	1.0.2-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-infoblox	3.0.0-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-journald-logger	2.0.4-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-journald-native	1.0.11-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-jwt	2.2.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-kafo	6.2.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-kafo_parsers	1.1.0-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-kafo_wizards	0.0.1-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-little-plugger	1.1.4-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-logging	2.3.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-logging-journald	2.0.0-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-mime-types	3.2.2-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-mime-types-data	3.2018.0812-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-multi_json	1.14.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-multipart-post	2.0.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-mustermann	1.0.2-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-net-ssh	4.2.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-net-ssh-krb	0.4.0-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-netrc	0.11.0-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-newt	0.9.7-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-openscap	0.4.9-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-powerbar	2.0.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-rack	2.2.3-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-rb-inotify	0.9.7-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-redfish_client	0.5.2-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-rest-client	2.0.2-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-rkerberos	0.1.5-18.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-rsec	0.4.3-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-ruby-libvirt	0.7.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-rubyipmi	0.10.0-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-sd_notify +1	0.1.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-sequel	5.7.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-server_sent_events	0.1.2-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-sinatra +1	2.0.3-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_ansible	3.0.1-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_dhcp_infoblox	0.0.16-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_dhcp_remote_isc	0.0.5-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_discovery	1.0.5-6.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_discovery_image	1.3.2-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_dynflow_core	0.3.2-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_openscap	0.7.4-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_pulp	2.1.0-3.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_remote_execution_ssh	0.3.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-sqlite3	1.3.13-5.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-statsd-instrument	2.1.4-2.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-tilt	2.0.8-4.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-unf	0.1.3-7.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-unf_ext	0.0.7.2-1.el7sat	RHSA-2021:1313
Red Hat Satellite Capsule 6	tfm-rubygem-xmlrpc +1	0.3.0-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	ansible-collection-redhat-satellite	2.0.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	ansible-runner	1.4.6-1.el7ar	RHSA-2021:1313
Red Hat Satellite 6	ansiblerole-foreman_scap_client	0.1.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	ansiblerole-insights-client	1.7.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	ansiblerole-satellite-receptor-installer	0.6.13-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	candlepin +1	3.1.26-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	crane-selinux +1	3.5.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	createrepo_c +1	0.17.1-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	foreman +13	2.3.1.20-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	foreman-bootloaders-redhat +1	202005201200-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	foreman-discovery-image	1:3.7.4-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	foreman-discovery-image-service +1	1.0.0-4.el7sat	RHSA-2021:1313
Red Hat Satellite 6	foreman-installer +1	1:2.3.1.10-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	foreman-proxy +2	2.3.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	future	0.16.0-11.el7sat	RHSA-2021:1313
Red Hat Satellite 6	gofer	2.12.5-7.el7sat	RHSA-2021:1313
Red Hat Satellite 6	hfsplus-tools	332.14-12.el7	RHSA-2021:1313
Red Hat Satellite 6	katello +2	3.18.1-3.el7sat	RHSA-2021:1313
Red Hat Satellite 6	katello-certs-tools	2.7.3-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	katello-client-bootstrap	1.7.5-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	keycloak-httpd-client-install	1.2.2-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	kobo	0.5.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	libcomps	0.1.15-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	libmodulemd	1.7.0-1.pulp.el7sat	RHSA-2021:1313
Red Hat Satellite 6	libmodulemd2	2.9.3-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	libsolv	0.7.12-2.el7pc	RHSA-2021:1313
Red Hat Satellite 6	libwebsockets	2.4.2-2.el7	RHSA-2021:1313
Red Hat Satellite 6	livecd-tools	1:20.4-1.6.el7sat	RHSA-2021:1313
Red Hat Satellite 6	mod_passenger	4.0.18-24.el7sat	RHSA-2021:1313
Red Hat Satellite 6	mod_xsendfile	0.12-11.el7sat	RHSA-2021:1313
Red Hat Satellite 6	ostree	2017.1-2.atomic.el7	RHSA-2021:1313
Red Hat Satellite 6	pcp-mmvstatsd	0.4-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pulp +11	2.21.5-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pulp-docker +2	3.2.9-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pulp-katello	1.0.3-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pulp-ostree +2	1.3.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pulpcore-selinux	1.2.3-2.el7pc	RHSA-2021:1313
Red Hat Satellite 6	puppet-agent	6.19.1-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	puppet-agent-oauth	0.5.1-3.el7sat	RHSA-2021:1313
Red Hat Satellite 6	puppet-foreman_scap_client	0.4.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	puppetlabs-stdlib	5.2.0-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	puppetserver	6.14.1-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pycairo	1.16.3-9.el7sat	RHSA-2021:1313
Red Hat Satellite 6	pygobject3	3.28.3-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-aiodns	2.0.0-3.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-aiofiles +1	0.6.0-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-aiohttp	3.6.2-4.el7ar	RHSA-2021:1313
Red Hat Satellite 6	python-amqp	2.2.2-5.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-anyjson	0.3.3-11.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-async-timeout	3.0.1-2.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-attrs	19.3.0-2.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-backoff	1.10.0-3.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-billiard	1:3.5.0.3-3.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-blinker	1.3-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-bson	3.2-2.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-celery	4.0.2-9.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-certifi	2020.6.20-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-cffi	1.14.3-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-chardet	3.0.4-10.el7ar	RHSA-2021:1313
Red Hat Satellite 6	python-click	6.7-9.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-crane	3.3.1-9.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-cryptography	2.9.2-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-daemon	2.1.2-7.el7at	RHSA-2021:1313
Red Hat Satellite 6	python-dateutil	2.8.1-3.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-diff-match-patch	20200713-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-django	1.11.29-1.el7sat	RHSA-2021:1313
Red Hat Satellite 6	python-django-currentuser	0.5.1-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-django-filter +2	2.3.0-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-django-lifecycle	0.8.0-1.el7pc	RHSA-2021:1313
Red Hat Satellite 6	python-django-prometheus	2.1.0-1.el7pc	RHSA-2021:1313
Red Hat JBoss EAP 7	eap7-dom4j	2.1.3-1.redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-elytron-web +1	1.6.2-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-glassfish-jsf	2.3.9-11.SP11_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-hal-console	3.2.9-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-hibernate +4	5.3.17-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-hibernate-validator +1	6.0.20-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-infinispan +8	9.4.19-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-ironjacamar +8	1.4.22-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-jackson-core +10	2.10.4-1.redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-jboss-genericjms	2.0.6-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-jboss-jsf-api_2.3_spec	3.0.0-4.SP04_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-jboss-logmanager	2.1.15-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-jboss-server-migration +21	1.7.1-7.Final_redhat_00009.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-jboss-xnio-base	3.7.8-1.SP1_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-netty +1	4.1.48-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-undertow	2.0.30-4.SP4_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-wildfly +2	7.3.2-4.GA_redhat_00002.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-wildfly-common	1.5.2-1.Final_redhat_00002.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-wildfly-elytron +1	1.10.7-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-wildfly-http-client +4	1.0.22-1.Final_redhat_00001.1.el6eap	RHSA-2020:3463, RHSA-2020:3462, RHSA-2020:3461
Red Hat JBoss EAP 7	eap7-wildfly-java-jdk8 +1	7.3.2-4.GA_redhat_00002.1.el7eap	RHSA-2020:3462

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat A Mq Clients 2	nodejs-rhea	1.0.21-1.el8	RHSA-2020:2605
Red Hat A Mq Clients 2	python3-qpid-proton	0.31.0-3.el8	RHSA-2020:2605
Red Hat A Mq Clients 2	qpid-cpp +3	1.36.0-30.el6_10amq	RHSA-2020:2605
Red Hat A Mq Clients 2	qpid-proton +9	0.31.0-3.el6_10	RHSA-2020:2605
Red Hat A Mq Clients 2	rubygem-qpid_proton	0.31.0-2.el7	RHSA-2020:2605

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SUSE Manager Server Module 4.3	netty	4.1.44.Final-150400.3.3.2	SUSE-SU-2022:3760-1
SUSE Manager Server Module 4.2	netty	4.1.44.Final-150300.4.3.2	SUSE-SU-2022:3617-1
SUSE Manager Server Module 4.1	netty	4.1.44.Final-150200.3.4.2	SUSE-SU-2022:3793-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	netty	4.1.60-1.4	openSUSE-SU-2024:11085-1

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	io.netty:netty-handler	>= 4.1.0, < 4.1.46	4.1.46	GHSA-mm9x-g8pc-w292

Advisories 15

RHSA-2021:1313 Red Hat Security Advisory: Satellite 6.9 Release Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2020:3462 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2020:3463 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2020:3461 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2020:2605 Red Hat Security Advisory: AMQ Clients 2.7.0 Release Red Hat Security Advisories (RHSA) · Oct 13, 2026
WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
USN-6049-1 netty vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
USN-4600-2 netty vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
DSA-4885-1 netty - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-2364-1 netty - security update Debian Security (DSA / DLA) · Mar 9, 2026
SUSE-SU-2022:3793-1 Security update for netty SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:11085-1 netty-4.1.60-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3760-1 Security update for netty SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3617-1 Security update for netty SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2025-1459 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 3, 2025

Denial of Service in Netty

Description

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

SUSE

openSUSE

Affected packages

Advisories 15

References