Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.2%
probabilidad de explotación
0.2%top 84% de las CVE
explotación observada
noninguna fuente lo reporta
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Productos afectados
netty · nettyReferencias
https://access.redhat.com/errata/RHSA-2026:26017https://access.redhat.com/errata/RHSA-2026:26018https://access.redhat.com/errata/RHSA-2026:26586https://access.redhat.com/errata/RHSA-2026:34608https://access.redhat.com/errata/RHSA-2026:37390https://access.redhat.com/errata/RHSA-2026:41951https://access.redhat.com/errata/RHSA-2026:48151https://access.redhat.com/security/cve/CVE-2026-45674https://bugzilla.redhat.com/show_bug.cgi?id=2488400https://github.com/netty/netty/releases/tag/netty-4.1.135.Finalhttps://github.com/netty/netty/releases/tag/netty-4.2.15.Finalhttps://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc