Oval Definition:oval:org.opensuse.security:def:202011612
Revision Date:2022-06-30Version:1
Title:CVE-2020-11612
Description:

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2020-11612
SUSE CVE-2020-11612
Platform(s):openSUSE Tumbleweed
Product(s):
Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • netty-4.1.60-1.4 is installed
  • OR netty-javadoc-4.1.60-1.4 is installed
  • OR netty-poms-4.1.60-1.4 is installed
    • BACK