Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-45673 EUVD-2026-36445GHSA-xmv7-r254-6q78

Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

Published Jun 12, 2026 · Updated Jun 12, 2026 · Assigned by GitHub_M

Vendor: netty Product: netty Package: akhq Package: apache-nifi Package: apache-pulsar-4.2 Package: apicurio-registry Package: celeborn-0.6 Package: druid Package: flyway Package: infinispan-16.1 Package: io.netty:netty-resolver-dns Package: keycloak-26.4-iamguarded-compat Package: keycloak-26.5 Package: keycloak-26.5-iamguarded-compat Package: keycloak-26.5-operator Package: keycloak-26.6 Package: keycloak-26.6-iamguarded-compat Package: keycloak-26.6-operator Package: management-api-for-apache-cassandra-5.0 Package: netty Package: netty Package: opensearch-3-discovery-ec2 Package: opensearch-3-iamguarded-compat Package: opensearch-3-neural-search Package: opensearch-3-repository-azure Package: selenium-server Package: sonarqube Package: spark-4.0-scala-2.13 Package: spark-4.1-scala-2.13 Package: strimzi-kafka-operator-cluster-operator Package: strimzi-kafka-operator-kafka-agent Package: strimzi-kafka-operator-kafka-init Package: strimzi-kafka-operator-kafka-thirdparty-libs-cc Package: strimzi-kafka-operator-topic-operator Package: strimzi-kafka-operator-tracing-agent Package: strimzi-kafka-operator-user-operator Package: tez Package: thingsboard-tb-mqtt-transport Package: thingsboard-tb-node Package: trino Package: trino-plugin-bigquery Package: trino-plugin-delta-lake Package: trino-plugin-exchange-filesystem Package: trino-plugin-exchange-hdfs Package: trino-plugin-hive Package: trino-plugin-hudi Package: trino-plugin-iceberg Package: trino-plugin-lakehouse Package: trino-plugin-opensearch Package: trino-plugin-oracle Package: trino-plugin-pinot Package: trino-plugin-spooling-filesystem Package: trino-plugin-teradata-functions Package: wildfly-openjdk-17 Package: wildfly-openjdk-21 Package: zipkin Package: zipkin-slim Ecosystem: Debian Ecosystem: Maven Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source port. This combination reduces the entropy of DNS queries, enabling DNS Cache Poisoning (Kaminsky attack). Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Affected products

VendorProductAffectedFixed
netty netty >= 4.2.0.Final, < 4.2.15.Final, < 4.1.135.Final —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 netty No fix yet —
Debian 13 netty No fix yet —
Debian 12 netty No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 netty No fix yet —
Ubuntu 25.10 netty No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS netty No fix yet —
Ubuntu Pro 24.04 LTS netty No fix yet —
Ubuntu Pro 22.04 LTS netty No fix yet —
Ubuntu Pro 20.04 LTS netty No fix yet —
Ubuntu Pro 18.04 LTS netty No fix yet —
Ubuntu Pro 16.04 LTS netty No fix yet —
Ubuntu Pro 14.04 LTS netty No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 netty 4.1.135-150200.4.50.1 SUSE-SU-2026:2802-1
SLES 15 SP7 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLES 15 SP6 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLES 15 SP5 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLES 15 SP4 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP6 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLES for SAP 15 SP5 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLES for SAP 15 SP4 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLE HPC 15 SP5 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1
SLE HPC 15 SP4 netty-tcnative 2.0.79-150200.3.45.1 SUSE-SU-2026:2802-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed netty 4.1.135-1.1 openSUSE-SU-2026:11033-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling akhq 0.27.1-r3 —
Wolfi rolling apache-nifi 2.9.0-r14 —
Wolfi rolling apache-pulsar-4.2 4.2.2-r3 —
Wolfi rolling apicurio-registry 3.3.0-r3 —
Wolfi rolling celeborn-0.6 0.6.3-r7 —
Wolfi rolling druid 37.0.0-r12 —
Wolfi rolling flyway 12.8.1-r4 —
Wolfi rolling infinispan-16.1 16.1.4-r3 —
Wolfi rolling keycloak-26.5 +3 No fix yet —
Wolfi rolling keycloak-26.6 +2 26.6.3-r3 —
Wolfi rolling management-api-for-apache-cassandra-5.0 0.1.120-r0 —
Wolfi rolling opensearch-3-discovery-ec2 +2 3.8.0-r3 —
Wolfi rolling opensearch-3-repository-azure 3.6.0-r7 —
Wolfi rolling selenium-server 4.44.0-r2 —
Wolfi rolling sonarqube 26.8.0.126808-r0 —
Wolfi rolling spark-4.0-scala-2.13 4.0.3-r1 —
Wolfi rolling spark-4.1-scala-2.13 4.1.2-r4 —
Wolfi rolling strimzi-kafka-operator-kafka-init +5 1.0.0-r6 —
Wolfi rolling strimzi-kafka-operator-kafka-thirdparty-libs-cc 1.0.0-r7 —
Wolfi rolling tez 0.10.5-r16 —
Wolfi rolling thingsboard-tb-node +1 4.3.1.2-r5 —
Wolfi rolling trino +4 483-r7 —
Wolfi rolling trino-plugin-hive +8 481-r7 —
Wolfi rolling wildfly-openjdk-17 +1 40.0.0-r3 —
Wolfi rolling zipkin +1 3.6.1-r10 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven io.netty:netty-resolver-dns >= 4.2.0.Final, < 4.2.15.Final 4.2.15.Final GHSA-xmv7-r254-6q78
Maven io.netty:netty-resolver-dns < 4.1.135.Final 4.1.135.Final GHSA-xmv7-r254-6q78

Advisories 3

References