CVE-2023-34462
published 2023-06-22CVE-2023-34462: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The…
PriorityP336medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
2.46%
82.5th percentile
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | netty | < netty 1:4.1.48-7+deb12u1 (bookworm) | netty 1:4.1.48-7+deb12u1 (bookworm) |
| netty | netty | < 4.1.94.Final | 4.1.94.Final |
| netty | netty | < 4.1.94 | 4.1.94 |
| netty | netty | >= 0 < 1:4.1.48-4+deb11u2 | 1:4.1.48-4+deb11u2 |
| netty | netty | >= 0 < 1:4.1.48-7+deb12u1 | 1:4.1.48-7+deb12u1 |
| netty | netty | >= 0 < 1:4.1.48-8 | 1:4.1.48-8 |
| netty | netty | >= 0 < 1:4.1.48-8 | 1:4.1.48-8 |
| netty | netty | >= 0 < 1:4.1.48-4+deb11u2build0.22.04.1 | 1:4.1.48-4+deb11u2build0.22.04.1 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_oracle6.5MEDIUM
vendor_redhat6.5MEDIUM
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Netty vulnerabilities
vendor_ubuntu·2024-09-05·CVSS 6.5
CVE-2023-34462 [MEDIUM] Netty vulnerabilities
Title: Netty vulnerabilities
Summary: Several security issues were fixed in Netty.
It was discovered that Netty did not properly sanitize its input
parameters. A remote attacker could possibly use this issue to cause a
crash. (CVE-2023-34462)
It was discovered that Netty incorrectly handled request cancellation. A
remote attacker could possibly use this issue to cause Netty to consume
resources, leading to a denial of service. (CVE-2023-44487)
Instructions: In general, a standard system update will make all the necessary changes.
Oracle
Oracle Oracle NoSQL Database Risk Matrix: Administration (Netty) — CVE-2023-34462
vendor_oracle·2024-01-15·CVSS 6.5
CVE-2023-34462 [MEDIUM] Oracle Oracle NoSQL Database Risk Matrix: Administration (Netty) — CVE-2023-34462
Oracle Oracle NoSQL Database Risk Matrix: Administration (Netty) vulnerability
CVE: CVE-2023-34462
CVSS: 6.5
Protocol: TLS
Remote exploit: No
Affected versions: Network
Advisory: cpujan2024 (JAN 2024)
Oracle
Oracle Oracle TimesTen In-Memory Database Risk Matrix: EM TimesTen plug-in (Netty) — CVE-2023-34462
vendor_oracle·2023-10-15·CVSS 5.3
CVE-2023-34462 [MEDIUM] Oracle Oracle TimesTen In-Memory Database Risk Matrix: EM TimesTen plug-in (Netty) — CVE-2023-34462
Oracle Oracle TimesTen In-Memory Database Risk Matrix: EM TimesTen plug-in (Netty) vulnerability
CVE: CVE-2023-34462
CVSS: 5.3
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuoct2023 (OCT 2023)
Red Hat
netty: SniHandler 16MB allocation leads to OOM
vendor_redhat·2023-06-23·CVSS 6.5
CVE-2023-34462 [MEDIUM] CWE-770 netty: SniHandler 16MB allocation leads to OOM
netty: SniHandler 16MB allocation leads to OOM
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks
Debian
CVE-2023-34462: netty - Netty is an asynchronous event-driven network application framework for rapid de...
vendor_debian·2023·CVSS 6.5
CVE-2023-34462 [MEDIUM] CVE-2023-34462: netty - Netty is an asynchronous event-driven network application framework for rapid de...
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is
OSV
netty vulnerabilities
osv·2024-09-05·CVSS 6.5
CVE-2023-34462 [MEDIUM] netty vulnerabilities
netty vulnerabilities
It was discovered that Netty did not properly sanitize its input
parameters. A remote attacker could possibly use this issue to cause a
crash. (CVE-2023-34462)
It was discovered that Netty incorrectly handled request cancellation. A
remote attacker could possibly use this issue to cause Netty to consume
resources, leading to a denial of service. (CVE-2023-44487)
OSV
CVE-2023-34462: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
osv·2023-06-22·CVSS 6.5
CVE-2023-34462 [MEDIUM] CVE-2023-34462: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is
OSV
netty-handler SniHandler 16MB allocation
osv·2023-06-20
CVE-2023-34462 [MEDIUM] netty-handler SniHandler 16MB allocation
netty-handler SniHandler 16MB allocation
### Summary
The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap.
### Details
The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record.
Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`
1/ allocate a 1
GHSA
netty-handler SniHandler 16MB allocation
ghsa·2023-06-20
CVE-2023-34462 [MEDIUM] CWE-400 netty-handler SniHandler 16MB allocation
netty-handler SniHandler 16MB allocation
### Summary
The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap.
### Details
The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record.
Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`
1/ allocate a 1
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-34462 netty: SniHandler 16MB allocation leads to OOM
bugzilla·2023-06-23·CVSS 6.5
CVE-2023-34462 [MEDIUM] CVE-2023-34462 netty: SniHandler 16MB allocation leads to OOM
CVE-2023-34462 netty: SniHandler 16MB allocation leads to OOM
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there
Fortinet
MOVEit Transfer Critical Vulnerability (CVE-2023-34362) Exploited as a 0-day | FortiGuard Labs
blogs_fortinet·2023-06-08·CVSS 9.8
CVE-2023-34362 [CRITICAL] MOVEit Transfer Critical Vulnerability (CVE-2023-34362) Exploited as a 0-day | FortiGuard Labs
FORTIGUARD LABS THREAT RESEARCH
MOVEit Transfer Critical Vulnerability (CVE-2023-34362) Exploited as a 0-day
By James Slaughter, Fred Gutierrez, and Shunichi Imano | June 08, 2023
Affected Platforms: All unpatched MOVEit Transfer versions running a SQL database
Impacted Users: Any organization that uses a vulnerable version of MOVEit Transfer
Impact: Remote attackers can install a backdoor and exfiltrate data
Severity Level: High
FortiGuard Labs is aware of a critical zero-day SQL injection vulnerability in the MOVEit Secure Managed File Transfer software (CVE-2023-34362) allegedly exploited by the Cl0p ransomware threat actor. High-profile government, finance, media, aviation, and healthcare organizations have reportedly been affected, with data exfiltrated and stolen.
Due to its seve
https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845https://security.netapp.com/advisory/ntap-20230803-0001/https://security.netapp.com/advisory/ntap-20240621-0007/https://www.debian.org/security/2023/dsa-5558https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845https://security.netapp.com/advisory/ntap-20230803-0001/https://security.netapp.com/advisory/ntap-20240621-0007/https://www.debian.org/security/2023/dsa-5558
2023-06-22
Published