| Package | Affected versions | Patched versions |
|---|---|---|
| io.netty:netty-handler | ≥ 4.1.0, < 4.1.46 | 4.1.46 |
| netty | ≥ 4.1, < 4.1.46 | 4.1.46 |
| communications brm - elastic charging engine | = 12.0.0.3 | |
| communications cloud native core service communication proxy | = 1.5.2 | |
| communications design studio | = 7.4.2 | |
| nosql database | < 20.3 | 20.3 |
| siebel core - server framework | < 21.5 | 21.5 |
| webcenter portal | = 12.2.1.3.0= 12.2.1.4.0 |
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free