https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:31:47.181044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05622 bdu:2023-05622 2026-10-02T19:31:47.332434+00:00 bdu:2023-05622 https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un… 2026-10-02T19:31:47.332487+00:00 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/cleanstart-2026-ci66802 Withdrawn: CLEANSTART-2026-CI66802 — Security fixes for CVE-2015-2104, CVE-2020-8908, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2022-1471, CVE-202… 2026-10-02T19:31:47.332507+00:00

Withdrawn by the publisher.

Affected: CleanStart: cassandra-fips

Multiple security vulnerabilities affect the cassandra-fips package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-29648 EUVD-2026-29648 2026-10-02T19:31:47.332548+00:00 EUVD-2026-29648 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37136 fkie_cve-2021-37136 2026-10-02T19:31:47.332561+00:00

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

 https://cve.radiocsirt.org/vuln/ghsa-grg4-wf29-r9vv GHSA-grg4-wf29-r9vv — Bzip2Decoder doesn't allow setting size restrictions for decompressed data 2026-10-02T19:31:47.332584+00:00

Affected: Maven: io.netty:netty-codec, Maven: org.jboss.netty:netty, Maven: io.netty:netty

### Impact The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).

All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

### Workarounds No workarounds other than not using the `Bzip2Decoder`

### References

Relevant code areas:

https://github.com/netty/netty/blob/netty-4.1.67.Final/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L80 https://github.com/netty/netty/blob/netty-4.1.67.Final/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L294 https://github.com/netty/netty/blob/netty-4.1.67.Final/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L305

 https://cve.radiocsirt.org/vuln/gsd-2021-37136 gsd-2021-37136 2026-10-02T19:31:47.332617+00:00 gsd-2021-37136 https://cve.radiocsirt.org/vuln/oesa-2021-1423 OESA-2021-1423 — netty security update 2026-10-02T19:31:47.332629+00:00

Affected: openEuler:20.03-LTS-SP1: netty, openEuler:20.03-LTS-SP2: netty

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc < - %description help Man pages and other related documents for . Security Fix(es): The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.(CVE-2021-37137) The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack(CVE-2021-37136)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14442-1 openSUSE-SU-2024:14442-1 — netty-4.1.114-1.1 on GA media 2026-10-02T19:31:47.332658+00:00

netty-4.1.114-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:3959 RHSA-2021:3959 — Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.1.5 security update 2026-10-02T19:31:47.332679+00:00

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

 https://cve.radiocsirt.org/vuln/suse-su-2022:1271-1 SUSE-SU-2022:1271-1 — Security update for netty 2026-10-02T19:31:47.332697+00:00

Security update for netty

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37136 UBUNTU-CVE-2021-37136 2026-10-02T19:31:47.332714+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:22.04:LTS: netty

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0097 WID-SEC-W-2022-0097 — Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T19:31:47.332738+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.