netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields

概要

参考情報

• netty/netty-incubator-codec-ohttp security advisory · WEB
• netty/netty-incubator-codec-ohttp · PACKAGE
• netty/netty-incubator-codec-ohttp release netty-incubator-codec-parent-ohttp-0.0.23.Final · WEB

io.netty.incubator:netty-incubator-codec-bhttp のその他の脆弱性

• CVE-2026-63202高 7.5netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding
• CVE-2026-63124高 7.5netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
• CVE-2026-61799中 5.3netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash
• CVE-2024-40642高 8.1The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly v…