CVE-2021-37137
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.
CVE-2021-37137
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2021-37137
Netty
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "The Netty project",
"product": "Netty",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "4.1.68Final",
"versionType": "custom"
}
]
}
]- Related CVEs
- CVE-2021-37137
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #16021 · Revision 1
- Added to Heist Feed
- Publisher date