Executive brief
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
Affected products
- Maven io.netty:netty
- Maven org.jboss.netty:netty
- Maven io.netty:netty-codec
Junglewise Threat Intelligence
CVE-2021-37137: SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
CVE-2021-37137 · Severity: low · CVSS 3.1 · Published 2021-09-09
Technologies: io.netty:netty (Maven), org.jboss.netty:netty (Maven), io.netty:netty-codec (Maven). Vendors: Maven.