[UPDATE] [hoch] Netty: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-16 10:25 UTC
  • Importiert: 2026-10-19 10:44 UTC
  • CVSS: 8.7
  • Quelle-ID: cert_bund
  • uid_hash: 68151fd4d882b29285b7687083f4454734a54a104c81e3fd1f14d10d906dc966

Inhalt

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Denial-of-Service-Zustände zu verursachen, Sicherheitsmaßnahmen zu umgehen, Request- oder Response-Smuggling durchzuführen sowie Daten offenzulegen oder zu manipulieren.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-100655

HIGH

8.7

CVE-2026-100656

HIGH

8.7

CVE-2026-100657

HIGH

8.7

CVE-2026-100658

HIGH

8.7

CVE-2026-100659

HIGH

8.7

MEDIUM

6.9

2026-09-26

CVE-2026-100660

HIGH

8.7

HIGH

8.7

2026-09-26

CVE-2026-100661

HIGH

8.7

HIGH

8.7

2026-09-26

CVE-2026-100662

HIGH

8.7

HIGH

8.7

2026-09-26

CVE-2026-100663

HIGH

8.7

HIGH

8.7

2026-09-26

CVE-2026-100664

HIGH

8.7

HIGH

8.7

2026-09-26

CVE-2026-100665

HIGH

8.7

HIGH

8.7

2026-09-26

CVE-2026-89044

HIGH

8.7

MEDIUM

6.9

2026-09-10

Externe Referenzen

Bezeichnung Typ CVE Quelle

Red Hat Security Advisory RHSA-2026:83612 vom 2026-10-15

VENDOR - wid_csaf

Netty Security Advisories vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-2g37-3h88-55hc vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-45h4-vhwh-fmhg vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-495p-pchh-r4mc vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-5vh9-c45f-rf7p vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-8352-h356-c9qh vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-8whp-c7w8-2m72 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-cg2g-fxr4-mg8m vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-f64r-x647-cg8w vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-ghg5-c4jg-8q5j vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-h75q-xqrh-59rf vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-hcvj-94mj-jp5c vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-hfr2-x62w-v49h vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-hmf3-49g9-g7qq vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-j4mg-hqgv-34qc vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-j58c-g352-8h4p vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-jgph-cgq3-c627 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-jhjp-5q4f-8wr2 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-jj3c-mwvr-9g52 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-jqf3-r9ww-c5x8 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-mj35-3qqm-q387 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-pq4x-537v-r54q vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-pvjx-v7vp-62vq vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-q9pg-8h3j-8hvm vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-r4xx-7fpg-j8xg vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-rmcw-9fcq-wjq7 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-rq4j-fc47-9698 vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-v5p2-hmgx-3xrx vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-w6j8-x45j-w75f vom 2026-09-09

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-wxrh-4rgq-pjcg vom 2026-09-09

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:11882-1 vom 2026-09-30

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4391-1 vom 2026-09-29

EXTERNAL - wid_csaf

IBM Security Bulletin 7291775 vom 2026-10-09

EXTERNAL - wid_csaf

IBM Security Bulletin 7292669 vom 2026-10-15

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss