CyberRota Analysis
AI-GeneratedA vulnerability exists in the WebSocketServerExtensionHandler, allowing for unbounded per-connection queue growth, which can lead to a denial of service (DoS) condition. This issue could be exploited by attackers to overwhelm the server, causing service disruptions. Organizations utilizing WebSocket servers should prioritize patching this vulnerability to mitigate potential service outages.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using HTTP/1.1 pipelining to send requests faster than the application can respond. This leads to an unbounded growth of a per-connection queue, consuming excessive memory. Eventually, this can cause the Java Virtual Machine (JVM) to exhaust its heap, resulting in a Denial of Service (DoS) for the affected server.