CyberRota Analysis
AI-GeneratedA vulnerability in Netty's HttpServerCodec allows remote, unauthenticated attackers to exploit HTTP/1.1 request pipelining while withholding reads, resulting in unbounded growth of the methodOverflowQueue. This can lead to excessive heap memory consumption, ultimately causing a denial of service due to memory exhaustion. Organizations using Netty in their applications should prioritize addressing this issue to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholding reads. This action causes the methodOverflowQueue to grow without limit, leading to unbounded heap memory consumption and a denial of service due to memory exhaustion.