Netty has Insufficient Bailiwick Validation for NS Records
CVE-2026-47691
### Summary Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoni
#maven
共收录 259 条相关情报。
← 返回所有主题Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
CVE-2026-47244
### Impact DefaultHttp2Connection.DefaultEndpoint initialises maxActiveStreams/maxStreams to Integer.MAX_VALUE, and Http
Netty: SCTP reassembly nests buffers without bound
CVE-2026-46340
For each non-complete SctpMessage fragment the handler does `fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBu
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
CVE-2026-45674
### Summary Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. ### D
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
CVE-2026-45673
### Summary Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
CVE-2026-45536
netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on 64-bit Lin
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
CVE-2026-45416
SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first
Netty's Default QUIC token handler accepts any client-supplied token
CVE-2026-44894
NoQuicTokenHandler is the tokenHandler used when the application does not set one. Its writeToken() returns false (serve
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
CVE-2026-44893
When decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex(), l
Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
CVE-2026-44892
### Summary The default configuration of the `Http3ConnectionHandler` in the Netty HTTP/3 codec lacks an enforced maximu
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
CVE-2026-44890
### Summary An attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
CVE-2026-44250
### Summary An attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the serv
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
CVE-2026-44249
### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compare
CC-Tweaked has an SSRF Protection Bypass with NAT64
CVE-2026-47695
### Summary CC-Tweaked's HTTP API (`http.request`, `http.websocket`) blocks requests to private network ranges to preve
Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
CVE-2026-46621
### Summary A Server-Side Code Injection vulnerability exists in the Yamcs script evaluation engine for Python algorithm
Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override
CVE-2026-46562
# Remote Code Execution via Mission Database algorithm override ## Summary The Nashorn `ScriptEngine` used to evaluate
Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
CVE-2026-44632
### Summary A Server-Side Code Injection vulnerability exists in the Yamcs algorithm evaluation engine (`org.yamcs.algor
Yamcs has No Rate Limiting on Authentication Endpoint
CVE-2026-44596
### Summary The authentication endpoint `POST /auth/token` in `yamcs-core` lacks any form of rate limiting, account loc
Yamcs vulnerable to unauthorized user enumeration via IAM API endpoints
CVE-2026-44595
### Summary The IAM API endpoints (`listUsers`, `getUser`, `listGroups`, and `getGroup`) in `yamcs-core` do not enforce
Yamcs Vulnerable to LDAP Injection in LdapAuthModule
CVE-2026-42568
### Summary An LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filt