https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:29:36.860502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375567 EUVD-2026-375567 2026-10-02T23:29:36.938447+00:00 EUVD-2026-375567 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93563 fkie_cve-2026-93563 2026-10-02T23:29:36.938483+00:00

A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory accumulation within the client's Java Virtual Machine (JVM) heap, causing an `OutOfMemoryError` and a denial of service (DoS) due to a process crash.

 https://cve.radiocsirt.org/vuln/ghsa-mv3r-x43m-8mr7 GHSA-mv3r-x43m-8mr7 2026-10-02T23:29:36.938518+00:00

Unbounded multi-line response accumulation in SmtpResponseDecoder leads to memory-exhaustion DoS

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11882-1 openSUSE-SU-2026:11882-1 — netty-4.1.138-1.1 on GA media 2026-10-02T23:29:36.938534+00:00

netty-4.1.138-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93563 UBUNTU-CVE-2026-93563 2026-10-02T23:29:36.938559+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:Pro:26.04:LTS: netty

A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory accumulation within the client's Java Virtual Machine (JVM) heap, causing an `OutOfMemoryError` and a denial of service (DoS) due to a process crash.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3477 WID-SEC-W-2026-3477 — Netty: Mehrere Schwachstellen 2026-10-02T23:29:36.938590+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Netty ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.