CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11612

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 82.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-11612

Netapp » Oncommand Api Services » Version: N/A

cpe:2.3:a:netapp:oncommand_api_services:-
Netapp » Oncommand Insight » Version: N/A

cpe:2.3:a:netapp:oncommand_insight:-
Netapp » Oncommand Workflow Automation » Version: N/A

cpe:2.3:a:netapp:oncommand_workflow_automation:-
Netty » Netty » Version: 4.1

cpe:2.3:a:netty:netty:4.1
Netty » Netty » Version: 4.1.0

cpe:2.3:a:netty:netty:4.1.0
Netty » Netty » Version: 4.1.1

cpe:2.3:a:netty:netty:4.1.1
Netty » Netty » Version: 4.1.10

cpe:2.3:a:netty:netty:4.1.10
Netty » Netty » Version: 4.1.11

cpe:2.3:a:netty:netty:4.1.11
Netty » Netty » Version: 4.1.12

cpe:2.3:a:netty:netty:4.1.12
Netty » Netty » Version: 4.1.13

cpe:2.3:a:netty:netty:4.1.13
Netty » Netty » Version: 4.1.14

cpe:2.3:a:netty:netty:4.1.14
Netty » Netty » Version: 4.1.15

cpe:2.3:a:netty:netty:4.1.15
Netty » Netty » Version: 4.1.16

cpe:2.3:a:netty:netty:4.1.16
Netty » Netty » Version: 4.1.17

cpe:2.3:a:netty:netty:4.1.17
Netty » Netty » Version: 4.1.18

cpe:2.3:a:netty:netty:4.1.18
Netty » Netty » Version: 4.1.19

cpe:2.3:a:netty:netty:4.1.19
Netty » Netty » Version: 4.1.2

cpe:2.3:a:netty:netty:4.1.2
Netty » Netty » Version: 4.1.20

cpe:2.3:a:netty:netty:4.1.20
Netty » Netty » Version: 4.1.21

cpe:2.3:a:netty:netty:4.1.21
Netty » Netty » Version: 4.1.22

cpe:2.3:a:netty:netty:4.1.22
Netty » Netty » Version: 4.1.23

cpe:2.3:a:netty:netty:4.1.23
Netty » Netty » Version: 4.1.24

cpe:2.3:a:netty:netty:4.1.24
Netty » Netty » Version: 4.1.25

cpe:2.3:a:netty:netty:4.1.25
Netty » Netty » Version: 4.1.26

cpe:2.3:a:netty:netty:4.1.26
Netty » Netty » Version: 4.1.27

cpe:2.3:a:netty:netty:4.1.27
Netty » Netty » Version: 4.1.28

cpe:2.3:a:netty:netty:4.1.28
Netty » Netty » Version: 4.1.29

cpe:2.3:a:netty:netty:4.1.29
Netty » Netty » Version: 4.1.3

cpe:2.3:a:netty:netty:4.1.3
Netty » Netty » Version: 4.1.30

cpe:2.3:a:netty:netty:4.1.30
Netty » Netty » Version: 4.1.31

cpe:2.3:a:netty:netty:4.1.31
Netty » Netty » Version: 4.1.32

cpe:2.3:a:netty:netty:4.1.32
Netty » Netty » Version: 4.1.33

cpe:2.3:a:netty:netty:4.1.33
Netty » Netty » Version: 4.1.34

cpe:2.3:a:netty:netty:4.1.34
Netty » Netty » Version: 4.1.35

cpe:2.3:a:netty:netty:4.1.35
Netty » Netty » Version: 4.1.36

cpe:2.3:a:netty:netty:4.1.36
Netty » Netty » Version: 4.1.37

cpe:2.3:a:netty:netty:4.1.37
Netty » Netty » Version: 4.1.38

cpe:2.3:a:netty:netty:4.1.38
Netty » Netty » Version: 4.1.39

cpe:2.3:a:netty:netty:4.1.39
Netty » Netty » Version: 4.1.4

cpe:2.3:a:netty:netty:4.1.4
Netty » Netty » Version: 4.1.40

cpe:2.3:a:netty:netty:4.1.40
Netty » Netty » Version: 4.1.41

cpe:2.3:a:netty:netty:4.1.41
Netty » Netty » Version: 4.1.42

cpe:2.3:a:netty:netty:4.1.42
Netty » Netty » Version: 4.1.43

cpe:2.3:a:netty:netty:4.1.43
Netty » Netty » Version: 4.1.44

cpe:2.3:a:netty:netty:4.1.44
Netty » Netty » Version: 4.1.45

cpe:2.3:a:netty:netty:4.1.45
Netty » Netty » Version: 4.1.5

cpe:2.3:a:netty:netty:4.1.5
Netty » Netty » Version: 4.1.6

cpe:2.3:a:netty:netty:4.1.6
Netty » Netty » Version: 4.1.7

cpe:2.3:a:netty:netty:4.1.7
Netty » Netty » Version: 4.1.8

cpe:2.3:a:netty:netty:4.1.8
Netty » Netty » Version: 4.1.9

cpe:2.3:a:netty:netty:4.1.9
Oracle » Communications Brm - Elastic Charging Engine » Version: 12.0.0.3

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3
Oracle » Communications Cloud Native Core Service Communication Proxy » Version: 1.5.2

cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.5.2
Oracle » Communications Design Studio » Version: 7.4.2

cpe:2.3:a:oracle:communications_design_studio:7.4.2
Oracle » Nosql Database » Version: 19.3.12

cpe:2.3:a:oracle:nosql_database:19.3.12
Oracle » Siebel Core - Server Framework » Version: N/A

cpe:2.3:a:oracle:siebel_core_-_server_framework:-
Oracle » Siebel Core - Server Framework » Version: 19.0

cpe:2.3:a:oracle:siebel_core_-_server_framework:19.0
Oracle » Siebel Core - Server Framework » Version: 20.12

cpe:2.3:a:oracle:siebel_core_-_server_framework:20.12
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Oracle » Webcenter Portal » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:o:oracle:communications_messaging_server:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11612

Products

Pricing

Contact Us