CVE-2022-41881

2022-12-1218:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.002 Low

EPSS

Percentile

51.4%

JSON

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder.

OSVersionArchitecturePackageVersionFilename
Debian12allnetty< 1:4.1.48-6netty_1:4.1.48-6_all.deb
Debian11allnetty< 1:4.1.48-4+deb11u1netty_1:4.1.48-4+deb11u1_all.deb
Debian10allnetty< 1:4.1.33-1+deb10u3netty_1:4.1.33-1+deb10u3_all.deb
Debian999allnetty< 1:4.1.48-6netty_1:4.1.48-6_all.deb
Debian13allnetty< 1:4.1.48-6netty_1:4.1.48-6_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	netty	< 1:4.1.48-6	netty_1:4.1.48-6_all.deb
Debian	11	all	netty	< 1:4.1.48-4+deb11u1	netty_1:4.1.48-4+deb11u1_all.deb
Debian	10	all	netty	< 1:4.1.33-1+deb10u3	netty_1:4.1.33-1+deb10u3_all.deb
Debian	999	all	netty	< 1:4.1.48-6	netty_1:4.1.48-6_all.deb
Debian	13	all	netty	< 1:4.1.48-6	netty_1:4.1.48-6_all.deb