CyberRota Analysis
AI-GeneratedA vulnerability in Netty's StompSubframeDecoder allows remote attackers to exploit improperly formatted STOMP frames, leading to a memory leak due to unbounded ByteBuf allocations. This can ultimately cause Denial of Service (DoS) conditions for applications utilizing the affected STOMP codec. Organizations relying on Netty for STOMP messaging should prioritize patching to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte. This causes the decoder to allocate a ByteBuf (a buffer for bytes) that is never released, leading to a permanent memory leak. Over time, this uncontrolled memory consumption can result in a Denial of Service (DoS) for the application using the affected STOMP codec.