Every CVE Search/ Get API key

CVE-2026-46340

Netty: SCTP reassembly nests buffers without bound

7.5 HighFix available

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.61%Up 0.6 points since Jun 12, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Netty: SCTP reassembly nests buffers without bound

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Record
CVE-2026-46340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770, CWE-770
Updated
2026-11-02
EUVDEUVD-2026-36451 7.5

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Record
EUVD-2026-36451
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5xrh-qmmq-w6ch 7.5

Netty: SCTP reassembly nests buffers without bound

For each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks.

Record
GHSA-5xrh-qmmq-w6ch
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
GitHub AdvisoriesGHSA-xpw8-rcwv-8f8p 7.5

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.

Impact

This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.

Patches

This is patched in version 4.1.100.Final.

Workarounds

A user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own Http2FrameListener implementation or an ChannelInboundHandler implementation (depending which http2 API is used).

References

Record
GHSA-xpw8-rcwv-8f8p
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 7.5

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Record
CVE-2026-46340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSV 7.5

Netty: SCTP reassembly nests buffers without bound

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Record
CVE-2026-46340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
Show 49 moreShow less
OSVDEBIAN-CVE-2026-46340 7.5

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Record
DEBIAN-CVE-2026-46340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-5xrh-qmmq-w6ch 7.5

Netty: SCTP reassembly nests buffers without bound

For each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks.

Record
GHSA-5xrh-qmmq-w6ch
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVGHSA-xpw8-rcwv-8f8p 7.5

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.

Impact

This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.

Patches

This is patched in version 4.1.100.Final.

Workarounds

A user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own Http2FrameListener implementation or an ChannelInboundHandler implementation (depending which http2 API is used).

References

Record
GHSA-xpw8-rcwv-8f8p
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVRHLW-2026-4140a7a9c48db376 7.5

Lightwell Security Advisory: netty-transport-sctp 4.1.100.Final-rhlw-00001

Red Hat Lightwell has released io.netty:netty-transport-sctp 4.1.100.Final-rhlw-00001 with backported fixes for CVE-2026-46340 and CVE-2026-59902.

CVE-2026-46340: Netty: SCTP reassembly nests buffers without bound

CVE-2026-59902: Netty: Memory Exhaustion in SctpMessageCompletionHandler

This patched artifact is a drop-in replacement for io.netty:netty-transport-sctp 4.1.100.Final from Maven Central.

Record
RHLW-2026-4140a7a9c48db376
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:53644 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate

Record
RHSA-2026:53644
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:53645 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update

Record
RHSA-2026:53645
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:53646 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update

Record
RHSA-2026:53646
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p 7.5

GHSA-xpw8-rcwv-8f8p in io.root.io.netty:netty-codec-http2 - Patched by Root

Root has patched GHSA-xpw8-rcwv-8f8p in the io.root.io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available.

Record
ROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-46340 7.5

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf)), wrapping the previous accumulator and the new slice into a new CompositeByteBuf every time. After N fragments the accumulator is an N-deep chain of composites, each holding references and component arrays; readableBytes()/getBytes() on the final buffer recurse N levels. There is no limit on N, on total bytes, or on the number of streamIdentifiers an attacker can open (each gets its own map entry). A peer that never sets the complete flag can grow this structure indefinitely from tiny 1-byte DATA chunks. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Record
UBUNTU-CVE-2026-46340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1783386140 No score

TuxCare security update for io.netty (5 CVEs)

TuxCare rebuilt 4 io.netty packages to address 5 CVEs. Fixed in 4.1.93.Final-tuxcare.2.

Record
CLSA-2026-1783386140
Updated
2026-11-02
OSVCLSA-2026-1783991057 No score

TuxCare security update for io.netty (5 CVEs)

TuxCare rebuilt 5 io.netty packages to address 5 CVEs. Fixed in 4.1.92.Final-tuxcare.4.

Record
CLSA-2026-1783991057
Updated
2026-11-02
OSVCLSA-2026-1783991061 No score

TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.82.Final-tuxcare.3.

Record
CLSA-2026-1783991061
Updated
2026-11-02
OSVCLSA-2026-1784164029 No score

TuxCare security update for io.netty:netty-transport-sctp (1 CVE)

TuxCare rebuilt io.netty:netty-transport-sctp to address 1 CVE. Fixed in 4.1.75.Final-tuxcare.2.

Record
CLSA-2026-1784164029
Updated
2026-11-02
OSVCLSA-2026-1785727938 No score

TuxCare security update for io.netty (13 CVEs)

TuxCare rebuilt 8 io.netty packages to address 13 CVEs. Fixed in 4.1.115.Final-tuxcare.7.

Record
CLSA-2026-1785727938
Updated
2026-11-02
OSVCLSA-2026-1786699450 No score

TuxCare security update for io.netty (10 CVEs)

TuxCare rebuilt 7 io.netty packages to address 10 CVEs. Fixed in 4.1.130.Final-tuxcare.2.

Record
CLSA-2026-1786699450
Updated
2026-11-02
OSVCLSA-2026-1786723067 No score

TuxCare security update for io.netty (14 CVEs)

TuxCare rebuilt 9 io.netty packages to address 14 CVEs. Fixed in 4.1.112.Final-tuxcare.5.

Record
CLSA-2026-1786723067
Updated
2026-11-02
OSVCLSA-2026-1787271464 No score

TuxCare security update for io.netty (59 CVEs)

TuxCare rebuilt 47 io.netty packages to address 59 CVEs. Fixed in 4.1.122.Final-tuxcare.2.

Record
CLSA-2026-1787271464
Updated
2026-11-02
OSVCLSA-2026-1787301097 No score

TuxCare security update for io.netty (60 CVEs)

TuxCare rebuilt 47 io.netty packages to address 60 CVEs. Fixed in 4.1.119.Final-tuxcare.1.

Record
CLSA-2026-1787301097
Updated
2026-11-02
OSVCLSA-2026-1787309634 No score

TuxCare security update for io.netty (62 CVEs)

TuxCare rebuilt 47 io.netty packages to address 62 CVEs. Fixed in 4.1.111.Final-tuxcare.1.

Record
CLSA-2026-1787309634
Updated
2026-11-02
OSVCLSA-2026-1787331164 No score

TuxCare security update for io.netty (48 CVEs)

TuxCare rebuilt 47 io.netty packages to address 48 CVEs. Fixed in 4.1.117.Final-tuxcare.3.

Record
CLSA-2026-1787331164
Updated
2026-11-02
OSVCLSA-2026-1787333890 No score

TuxCare security update for io.netty (61 CVEs)

TuxCare rebuilt 47 io.netty packages to address 61 CVEs. Fixed in 4.1.108.Final-tuxcare.1.

Record
CLSA-2026-1787333890
Updated
2026-11-02
OSVCLSA-2026-1787383378 No score

TuxCare security update for io.netty (61 CVEs)

TuxCare rebuilt 47 io.netty packages to address 61 CVEs. Fixed in 4.1.107.Final-tuxcare.1.

Record
CLSA-2026-1787383378
Updated
2026-11-02
OSVCLSA-2026-1787397404 No score

TuxCare security update for io.netty (62 CVEs)

TuxCare rebuilt 47 io.netty packages to address 62 CVEs. Fixed in 4.1.94.Final-tuxcare.1.

Record
CLSA-2026-1787397404
Updated
2026-11-02
OSVCLSA-2026-1787559127 No score

TuxCare security update for io.netty (3 CVEs)

TuxCare rebuilt 3 io.netty packages to address 3 CVEs. Fixed in 4.1.73.Final-tuxcare.4.

Record
CLSA-2026-1787559127
Updated
2026-11-02
OSVCLSA-2026-1787668954 No score

TuxCare security update for io.netty (8 CVEs)

TuxCare rebuilt 7 io.netty packages to address 8 CVEs. Fixed in 4.1.79.Final-tuxcare.1.

Record
CLSA-2026-1787668954
Updated
2026-11-02
OSVCLSA-2026-1790751161 No score

TuxCare security update for io.netty (18 CVEs)

TuxCare rebuilt 11 io.netty packages to address 18 CVEs. Fixed in 4.1.87.Final-tuxcare.1.

Record
CLSA-2026-1790751161
Updated
2026-11-02
OSVCLSA-2026-1791901028 No score

TuxCare security update for io.netty (19 CVEs)

TuxCare rebuilt 46 io.netty packages to address 19 CVEs. Fixed in 4.1.80.Final-tuxcare.1.

Record
CLSA-2026-1791901028
Updated
2026-11-02
OSVCLSA-2026-1792502613 No score

TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.42.Final-tuxcare.2.

Record
CLSA-2026-1792502613
Updated
2026-11-02
OSVCLSA-2026-1792664900 No score

TuxCare security update for io.netty (15 CVEs)

TuxCare rebuilt 7 io.netty packages to address 15 CVEs. Fixed in 4.1.101.Final-tuxcare.1.

Record
CLSA-2026-1792664900
Updated
2026-11-02
OSVCLSA-2026-1792665279 No score

TuxCare security update for io.netty (13 CVEs)

TuxCare rebuilt 7 io.netty packages to address 13 CVEs. Fixed in 4.1.100.Final-tuxcare.1.

Record
CLSA-2026-1792665279
Updated
2026-11-02
OSVCLSA-2026-1792665490 No score

TuxCare security update for io.netty (13 CVEs)

TuxCare rebuilt 9 io.netty packages to address 13 CVEs. Fixed in 4.1.81.Final-tuxcare.1.

Record
CLSA-2026-1792665490
Updated
2026-11-02
OSVCLSA-2026-1792673710 No score

TuxCare security update for io.netty (27 CVEs)

TuxCare rebuilt 15 io.netty packages to address 27 CVEs. Fixed in 4.1.72.Final-tuxcare.1.

Record
CLSA-2026-1792673710
Updated
2026-11-02
OSVCLSA-2026-1792673723 No score

TuxCare security update for io.netty (25 CVEs)

TuxCare rebuilt 43 io.netty packages to address 25 CVEs. Fixed in 4.1.68.Final-tuxcare.1.

Record
CLSA-2026-1792673723
Updated
2026-11-02
OSVCLSA-2026-1792686278 No score

TuxCare security update for io.netty (26 CVEs)

TuxCare rebuilt 14 io.netty packages to address 26 CVEs. Fixed in 4.1.118.Final-tuxcare.1.

Record
CLSA-2026-1792686278
Updated
2026-11-02
OSVCLSA-2026-1792686520 No score

TuxCare security update for io.netty (24 CVEs)

TuxCare rebuilt 13 io.netty packages to address 24 CVEs. Fixed in 4.1.114.Final-tuxcare.1.

Record
CLSA-2026-1792686520
Updated
2026-11-02
OSVCLSA-2026-1792692962 No score

TuxCare security update for io.netty (17 CVEs)

TuxCare rebuilt 14 io.netty packages to address 17 CVEs. Fixed in 4.2.12.Final-tuxcare.1.

Record
CLSA-2026-1792692962
Updated
2026-11-02
OSVCLSA-2026-1792746051 No score

TuxCare security update for io.netty (26 CVEs)

TuxCare rebuilt 40 io.netty packages to address 26 CVEs. Fixed in 4.1.53.Final-tuxcare.1.

Record
CLSA-2026-1792746051
Updated
2026-11-02
OSVCLSA-2026-1792747108 No score

TuxCare security update for io.netty (11 CVEs)

TuxCare rebuilt 6 io.netty packages to address 11 CVEs. Fixed in 4.1.39.Final-tuxcare.1.

Record
CLSA-2026-1792747108
Updated
2026-11-02
OSVCLSA-2026-1792747978 No score

TuxCare security update for io.netty (21 CVEs)

TuxCare rebuilt 11 io.netty packages to address 21 CVEs. Fixed in 4.1.51.Final-tuxcare.1.

Record
CLSA-2026-1792747978
Updated
2026-11-02
OSVCLSA-2026-1792785316 No score

TuxCare security update for io.netty (10 CVEs)

TuxCare rebuilt 7 io.netty packages to address 10 CVEs. Fixed in 4.1.21.Final-tuxcare.1.

Record
CLSA-2026-1792785316
Updated
2026-11-02
OSVCLSA-2026-1793029439 No score

TuxCare security update for io.netty (7 CVEs)

TuxCare rebuilt 6 io.netty packages to address 7 CVEs. Fixed in 4.1.31.Final-tuxcare.1.

Record
CLSA-2026-1793029439
Updated
2026-11-02
OSVCLSA-2026-1793030575 No score

TuxCare security update for io.netty (8 CVEs)

TuxCare rebuilt 7 io.netty packages to address 8 CVEs. Fixed in 4.1.52.Final-tuxcare.4.

Record
CLSA-2026-1793030575
Updated
2026-11-02
OSVCLSA-2026-1793031356 No score

TuxCare security update for io.netty (11 CVEs)

TuxCare rebuilt 8 io.netty packages to address 11 CVEs. Fixed in 4.1.43.Final-tuxcare.3.

Record
CLSA-2026-1793031356
Updated
2026-11-02
OSVCLSA-2026-1793032661 No score

TuxCare security update for io.netty (9 CVEs)

TuxCare rebuilt 7 io.netty packages to address 9 CVEs. Fixed in 4.1.59.Final-tuxcare.1.

Record
CLSA-2026-1793032661
Updated
2026-11-02
OSVCLSA-2026-1793056279 No score

TuxCare security update for io.netty (6 CVEs)

TuxCare rebuilt 5 io.netty packages to address 6 CVEs. Fixed in 4.1.48.Final-tuxcare.5.

Record
CLSA-2026-1793056279
Updated
2026-11-02
OSVCLSA-2026-1793084723 No score

TuxCare security update for io.netty (8 CVEs)

TuxCare rebuilt 6 io.netty packages to address 8 CVEs. Fixed in 4.1.38.Final-tuxcare.1.

Record
CLSA-2026-1793084723
Updated
2026-11-02
OSVCLSA-2026-1793085576 No score

TuxCare security update for io.netty (7 CVEs)

TuxCare rebuilt 6 io.netty packages to address 7 CVEs. Fixed in 4.1.23.Final-tuxcare.1.

Record
CLSA-2026-1793085576
Updated
2026-11-02
OSVCLSA-2026-1793126585 No score

TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.29.Final-tuxcare.2.

Record
CLSA-2026-1793126585
Updated
2026-11-02
OSVCLSA-2026-1793349903 No score

TuxCare security update for io.netty (24 CVEs)

TuxCare rebuilt 13 io.netty packages to address 24 CVEs. Fixed in 4.1.74.Final-tuxcare.1.

Record
CLSA-2026-1793349903
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
io.netty:netty-transport-sctp
Maven
 4.2.0.Final to 4.2.14.Final
4.2.15.Final
io.netty:netty-transport-sctp
Maven
 through 4.1.134.Final
4.1.135.Final
io.netty:netty-codec-http2
Maven
 before 4.1.100.Final
4.1.100.Final
io.netty:netty-codec-dns
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.93.Final up to 4.1.93.Final-tuxcare.2, plus listed versions
4.1.93.Final-tuxcare.1
4.1.93.Final-tuxcare.2
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.93.Final up to 4.1.93.Final-tuxcare.2, plus listed versions
4.1.93.Final-tuxcare.1
4.1.93.Final-tuxcare.2
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.93.Final up to 4.1.93.Final-tuxcare.2, plus listed versions
4.1.93.Final-tuxcare.1
4.1.93.Final-tuxcare.2
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.93.Final up to 4.1.93.Final-tuxcare.2, plus listed versions
4.1.93.Final-tuxcare.1
4.1.93.Final-tuxcare.2
io.netty:netty-codec-dns
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.92.Final up to 4.1.92.Final-tuxcare.4, plus listed versions
4.1.92.Final-tuxcare.14.1.92.Final-tuxcare.24.1.92.Final-tuxcare.3
4.1.92.Final-tuxcare.4
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.92.Final up to 4.1.92.Final-tuxcare.4, plus listed versions
4.1.92.Final-tuxcare.14.1.92.Final-tuxcare.24.1.92.Final-tuxcare.3
4.1.92.Final-tuxcare.4
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.92.Final up to 4.1.92.Final-tuxcare.4, plus listed versions
4.1.92.Final-tuxcare.14.1.92.Final-tuxcare.24.1.92.Final-tuxcare.3
4.1.92.Final-tuxcare.4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
io.netty:netty-codec-redis
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.92.Final up to 4.1.92.Final-tuxcare.4, plus listed versions
4.1.92.Final-tuxcare.14.1.92.Final-tuxcare.24.1.92.Final-tuxcare.3
4.1.92.Final-tuxcare.4
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.92.Final up to 4.1.92.Final-tuxcare.4, plus listed versions
4.1.92.Final-tuxcare.14.1.92.Final-tuxcare.24.1.92.Final-tuxcare.3
4.1.92.Final-tuxcare.4
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 2 CVEs
 4.1.82.Final up to 4.1.82.Final-tuxcare.3, plus listed versions
4.1.82.Final-tuxcare.14.1.82.Final-tuxcare.2
4.1.82.Final-tuxcare.3
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 2 CVEs
 4.1.82.Final up to 4.1.82.Final-tuxcare.3, plus listed versions
4.1.82.Final-tuxcare.14.1.82.Final-tuxcare.2
4.1.82.Final-tuxcare.3
io.netty:netty-transport-sctp
TuxCare:Maven
 4.1.75.Final up to 4.1.75.Final-tuxcare.2, plus listed versions
4.1.75.Final-tuxcare.1
4.1.75.Final-tuxcare.2
io.netty:netty-codec
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-codec-haproxy
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-codec-redis
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-handler
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-resolver-dns
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 13 CVEs
 4.1.115.Final up to 4.1.115.Final-tuxcare.7, plus listed versions
4.1.115.Final-tuxcare.14.1.115.Final-tuxcare.34.1.115.Final-tuxcare.44.1.115.Final-tuxcare.54.1.115.Final-tuxcare.6
4.1.115.Final-tuxcare.7
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-codec-redis
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-handler
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-handler-proxy
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-resolver-dns
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 10 CVEs
 4.1.130.Final up to 4.1.130.Final-tuxcare.2, plus listed versions
4.1.130.Final-tuxcare.1
4.1.130.Final-tuxcare.2
io.netty:netty-codec
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-codec-haproxy
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-codec-redis
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-common
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-handler
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-resolver-dns
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 14 CVEs
 4.1.112.Final up to 4.1.112.Final-tuxcare.5, plus listed versions
4.1.112.Final-tuxcare.14.1.112.Final-tuxcare.24.1.112.Final-tuxcare.34.1.112.Final-tuxcare.4
4.1.112.Final-tuxcare.5
io.netty:netty-all
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-bom
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-buffer
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-dns
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-haproxy
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-memcache
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-mqtt
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-redis
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-smtp
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-socks
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-stomp
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-codec-xml
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-common
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-dev-tools
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-example
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-handler
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-handler-proxy
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-handler-ssl-ocsp
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-microbench
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-parent
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-resolver
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-resolver-dns
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-resolver-dns-classes-macos
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-resolver-dns-native-macos
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-autobahn
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-http2
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-native
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-native-image
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-native-image-client
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-native-image-client-runtime-init
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-osgi
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-testsuite-shading
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-blockhound-tests
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-classes-epoll
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-classes-kqueue
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-native-epoll
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-native-kqueue
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-native-unix-common
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-native-unix-common-tests
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-rxtx
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-transport-udt
TuxCare:Maven
From an advisory covering 57 CVEs
 4.1.122.Final up to 4.1.122.Final-tuxcare.2, plus listed versions
4.1.122.Final-tuxcare.1
4.1.122.Final-tuxcare.2
io.netty:netty-all
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-bom
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-buffer
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-dns
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-haproxy
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-http
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-http2
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-memcache
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-mqtt
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-redis
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-smtp
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-socks
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-stomp
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-codec-xml
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-common
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-dev-tools
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-example
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-handler
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-handler-proxy
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-handler-ssl-ocsp
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-microbench
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-parent
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-resolver
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-resolver-dns
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-resolver-dns-classes-macos
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-resolver-dns-native-macos
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-autobahn
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-http2
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-native
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-native-image
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-native-image-client
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-native-image-client-runtime-init
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-osgi
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-testsuite-shading
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-blockhound-tests
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-classes-epoll
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-classes-kqueue
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-native-epoll
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-native-kqueue
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-native-unix-common
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-native-unix-common-tests
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-rxtx
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-sctp
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-transport-udt
TuxCare:Maven
From an advisory covering 58 CVEs
 4.1.119.Final up to 4.1.119.Final-tuxcare.1
4.1.119.Final-tuxcare.1
io.netty:netty-all
TuxCare:Maven
From an advisory covering 60 CVEs
 4.1.111.Final up to 4.1.111.Final-tuxcare.1
4.1.111.Final-tuxcare.1
io.netty:netty-bom
TuxCare:Maven
From an advisory covering 60 CVEs
 4.1.111.Final up to 4.1.111.Final-tuxcare.1
4.1.111.Final-tuxcare.1
io.netty:netty-buffer
TuxCare:Maven
From an advisory covering 60 CVEs
 4.1.111.Final up to 4.1.111.Final-tuxcare.1
4.1.111.Final-tuxcare.1
netty
Debian:12
 All versions, plus listed versions
1:4.1.48-101:4.1.48-111:4.1.48-121:4.1.48-131:4.1.48-14
Show 7 moreShow less
1:4.1.48-151:4.1.48-161:4.1.48-71:4.1.48-7+deb12u11:4.1.48-7+deb12u21:4.1.48-81:4.1.48-9
 None known
netty
Debian:13
 All versions, plus listed versions
1:4.1.48-101:4.1.48-10+deb13u11:4.1.48-111:4.1.48-121:4.1.48-131:4.1.48-141:4.1.48-151:4.1.48-16
 None known
netty
Debian:14
 All versions, plus listed versions
1:4.1.48-101:4.1.48-111:4.1.48-121:4.1.48-131:4.1.48-141:4.1.48-151:4.1.48-16
 None known
io.netty:netty-transport-sctp
Maven
 4.2.0.Final up to 4.2.15.Final, plus listed versions
4.2.1.Final4.2.10.Final4.2.11.Final4.2.12.Final4.2.13.Final
Show 9 moreShow less
4.2.14.Final4.2.2.Final4.2.3.Final4.2.4.Final4.2.5.Final4.2.6.Final4.2.7.Final4.2.8.Final4.2.9.Final
4.2.15.Final
io.netty:netty-transport-sctp
Maven
 before 4.1.135.Final, plus listed versions
4.0.0.Beta14.0.0.Beta24.0.0.Beta34.0.0.CR14.0.0.CR2
Show 45 moreShow less
4.0.0.CR34.0.0.CR44.0.0.CR54.0.0.CR64.0.0.CR74.0.0.CR84.0.0.CR94.0.0.Final4.0.1.Final4.0.10.Final4.0.11.Final4.0.12.Final4.0.13.Final4.0.14.Beta14.0.14.Final4.0.15.Final4.0.16.Final4.0.17.Final4.0.18.Final4.0.19.Final4.0.2.Final4.0.20.Final4.0.21.Final4.0.22.Final4.0.23.Final4.0.24.Final4.0.25.Final4.0.26.Final4.0.27.Final4.0.28.Final4.0.29.Final4.0.3.Final4.0.30.Final4.0.31.Final4.0.32.Final4.0.33.Final4.0.34.Final4.0.35.Final4.0.36.Final4.0.37.Final4.0.38.Final4.0.39.Final4.0.4.Final4.0.40.Final4.0.41.Final
4.1.135.Final
io.netty:netty-codec-http2
Maven
 before 4.1.100.Final, plus listed versions
4.1.0.Beta44.1.0.Beta54.1.0.Beta64.1.0.Beta74.1.0.Beta8
Show 45 moreShow less
4.1.0.CR14.1.0.CR24.1.0.CR34.1.0.CR44.1.0.CR54.1.0.CR64.1.0.CR74.1.0.Final4.1.1.Final4.1.10.Final4.1.11.Final4.1.12.Final4.1.13.Final4.1.14.Final4.1.15.Final4.1.16.Final4.1.17.Final4.1.18.Final4.1.19.Final4.1.2.Final4.1.20.Final4.1.21.Final4.1.22.Final4.1.23.Final4.1.24.Final4.1.25.Final4.1.26.Final4.1.27.Final4.1.28.Final4.1.29.Final4.1.3.Final4.1.30.Final4.1.31.Final4.1.32.Final4.1.33.Final4.1.34.Final4.1.35.Final4.1.36.Final4.1.37.Final4.1.38.Final4.1.39.Final4.1.4.Final4.1.40.Final4.1.41.Final4.1.42.Final
4.1.100.Final
io.netty:netty-transport-sctp
Red Hat Lightwell:Maven
From an advisory covering 2 CVEs
 before 4.1.100.Final-rhlw-00001, plus listed versions
4.0.0.Beta14.0.0.Beta24.0.0.Beta34.0.0.CR14.0.0.CR2
Show 45 moreShow less
4.0.0.CR34.0.0.CR44.0.0.CR54.0.0.CR64.0.0.CR74.0.0.CR84.0.0.CR94.0.0.Final4.0.1.Final4.0.10.Final4.0.11.Final4.0.12.Final4.0.13.Final4.0.14.Beta14.0.14.Final4.0.15.Final4.0.16.Final4.0.17.Final4.0.18.Final4.0.19.Final4.0.2.Final4.0.20.Final4.0.21.Final4.0.22.Final4.0.23.Final4.0.24.Final4.0.25.Final4.0.26.Final4.0.27.Final4.0.28.Final4.0.29.Final4.0.3.Final4.0.30.Final4.0.31.Final4.0.32.Final4.0.33.Final4.0.34.Final4.0.35.Final4.0.36.Final4.0.37.Final4.0.38.Final4.0.39.Final4.0.4.Final4.0.40.Final4.0.41.Final
4.1.100.Final-rhlw-00001
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el7eap
0:2.16.0-22.redhat_00057.1.el7eap
eap7-glassfish-jsf
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.3.14-11.SP11_redhat_00001.1.el7eap
0:2.3.14-11.SP11_redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el7eap
0:1.5.26-2.Final_redhat_00001.1.el7eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el7eap
0:2.18.8-1.redhat_00003.1.el7eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:5.0.31-3.SP2_redhat_00001.1.el7eap
0:5.0.31-3.SP2_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.10.0-46.Final_redhat_00044.1.el7eap
0:1.10.0-46.Final_redhat_00044.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.10.0-46.Final_redhat_00044.1.el7eap
0:1.10.0-46.Final_redhat_00044.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:1.10.0-46.Final_redhat_00044.1.el7eap
0:1.10.0-46.Final_redhat_00044.1.el7eap
eap7-netty
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-all
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-handler
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el7eap
0:4.1.135-1.Final_redhat_00001.1.el7eap
eap7-picketlink-api
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-bindings
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-30.SP12_redhat_00020.1.el7eap
0:2.5.5-30.SP12_redhat_00020.1.el7eap
eap7-picketlink-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-config
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-federation
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-idm-api
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-idm-impl
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-idm-simple-schema
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-impl
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-24.SP12_redhat_00016.1.el7eap
0:2.5.5-24.SP12_redhat_00016.1.el7eap
eap7-picketlink-wildfly8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.5.5-30.SP12_redhat_00020.1.el7eap
0:2.5.5-30.SP12_redhat_00020.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:2.2.40-2.SP3_redhat_00001.1.el7eap
0:2.2.40-2.SP3_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:7.4.25-2.GA_redhat_00001.1.el7eap
0:7.4.25-2.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:7.4.25-2.GA_redhat_00001.1.el7eap
0:7.4.25-2.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:7.4.25-2.GA_redhat_00001.1.el7eap
0:7.4.25-2.GA_redhat_00001.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:7.4.25-2.GA_redhat_00001.1.el7eap
0:7.4.25-2.GA_redhat_00001.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 41 CVEs
 before 0:7.4.25-2.GA_redhat_00001.1.el7eap
0:7.4.25-2.GA_redhat_00001.1.el7eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.16.0-22.redhat_00057.1.el8eap
0:2.16.0-22.redhat_00057.1.el8eap
eap7-glassfish-jsf
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.3.14-11.SP11_redhat_00001.1.el8eap
0:2.3.14-11.SP11_redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.5.26-2.Final_redhat_00001.1.el8eap
0:1.5.26-2.Final_redhat_00001.1.el8eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:2.18.8-1.redhat_00003.1.el8eap
0:2.18.8-1.redhat_00003.1.el8eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:5.0.31-3.SP2_redhat_00001.1.el8eap
0:5.0.31-3.SP2_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.10.0-46.Final_redhat_00044.1.el8eap
0:1.10.0-46.Final_redhat_00044.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.10.0-46.Final_redhat_00044.1.el8eap
0:1.10.0-46.Final_redhat_00044.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:1.10.0-46.Final_redhat_00044.1.el8eap
0:1.10.0-46.Final_redhat_00044.1.el8eap
eap7-netty
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
eap7-netty-all
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 41 CVEs
 before 0:4.1.135-1.Final_redhat_00001.1.el8eap
0:4.1.135-1.Final_redhat_00001.1.el8eap
io.root.io.netty:netty-codec-http2
Root:Maven
 before 4.1.97.Final-root.io.1
4.1.97.Final-root.io.14.1.97.Final-root.io.24.1.97.Final-root.io.34.1.97.Final-root.io.44.1.97.Final-root.io.54.1.97.Final-root.io.64.1.97.Final-root.io.7
io.netty:netty-codec-http2
Root:Maven
 before 4.1.97.Final-aikido.7
4.1.97.Final-aikido.7
netty-tcnative
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 18 CVEs
 before 4.1.135-150200.4.50.1
4.1.135-150200.4.50.1
netty-tcnative
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty-tcnative
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 18 CVEs
 before 2.0.79-150200.3.45.1
2.0.79-150200.3.45.1
netty
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:3.2.6.Final-21:3.2.6.Final-2+deb8u2build0.14.04.1~esm11:3.2.6.Final-2+deb8u2ubuntu0.1~esm1
 None known
netty
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:3.2.6.Final-21:4.0.32-11:4.0.33-11:4.0.34-11:4.0.34-1ubuntu0.1~esm1
Show 4 moreShow less
1:4.0.34-1ubuntu0.1~esm21:4.0.34-1ubuntu0.1~esm31:4.0.34-1ubuntu0.1~esm41:4.0.34-1ubuntu0.1~esm5
 None known
netty
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:4.1.7-41:4.1.7-4ubuntu0.1~esm11:4.1.7-4ubuntu0.11:4.1.7-4ubuntu0.1+esm11:4.1.7-4ubuntu0.1+esm2
Show 5 moreShow less
1:4.1.7-4ubuntu0.1+esm31:4.1.7-4ubuntu0.1+esm41:4.1.7-4ubuntu0.1+esm51:4.1.7-4ubuntu0.1+esm61:4.1.7-4ubuntu0.1+esm7
 None known
netty
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:4.1.33-11:4.1.33-21:4.1.33-31:4.1.45-11:4.1.45-1ubuntu0.1~esm1
Show 5 moreShow less
1:4.1.45-1ubuntu0.1~esm21:4.1.45-1ubuntu0.1~esm31:4.1.45-1ubuntu0.1~esm41:4.1.45-1ubuntu0.1~esm61:4.1.45-1ubuntu0.1~esm7
 None known
netty
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1:4.1.48-41:4.1.48-4+deb11u1build0.22.04.11:4.1.48-4+deb11u2build0.22.04.11:4.1.48-4+deb11u2ubuntu0.1~esm11:4.1.48-4+deb11u2ubuntu0.1~esm2
Show 5 moreShow less
1:4.1.48-4+deb11u2ubuntu0.11:4.1.48-4+deb11u2ubuntu0.1+esm11:4.1.48-4+deb11u2ubuntu0.1+esm31:4.1.48-4+deb11u2ubuntu0.21:4.1.48-4+deb11u2ubuntu0.2+esm1
 None known
netty
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
1:4.1.48-71:4.1.48-81:4.1.48-91:4.1.48-9ubuntu0.1~esm11:4.1.48-9ubuntu0.1~esm2
Show 6 moreShow less
1:4.1.48-9ubuntu0.11:4.1.48-9ubuntu0.1+esm11:4.1.48-9ubuntu0.1+esm31:4.1.48-9ubuntu0.21:4.1.48-9ubuntu0.2+esm11:4.1.48-9ubuntu0.2+esm2
 None known
netty
Ubuntu:25.10
 All versions, plus listed versions
1:4.1.48-101:4.1.48-10ubuntu0.25.10.11:4.1.48-10ubuntu0.25.10.2
 None known
netty
Ubuntu:26.10
 All versions, plus listed versions
1:4.1.48-161:4.1.48-16ubuntu1
 None known
netty
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
1:4.1.48-101:4.1.48-111:4.1.48-121:4.1.48-131:4.1.48-141:4.1.48-161:4.1.48-16ubuntu0.1~esm2
 None known
netty
openSUSE:Tumbleweed
From an advisory covering 18 CVEs
 before 4.1.135-1.1
4.1.135-1.1

History

History
RecordedChangedSources
affected
affected_more, aliasesOSV
affected_more, aliasesOSV
affected_more, aliasesOSV
affected_more, aliases, factsOSV
affected, affected_more, aliasesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46340 is a high vulnerability (CVSS 7.5) in Netty, published October 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in io.netty:netty-transport-sctp 4.2.15.Final.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 190 package rows, 368 versions and 86 references. The JSON record has them. Also not on the record: 578 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 10 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open