Description
The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory.
Reactor Netty 1.3.0 - 1.3.6
Reactor Netty 1.1.0 - 1.2.18
Reactor Netty 1.0.52 and earlier
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spring | Reactor Netty | 1.3.0 – ≤ 1.3.6, 1.1.0 – ≤ 1.2.18, ≤ 1.0.52 | — |