{
  "cveId": "CVE-2023-34462",
  "url": "https://patchblox.com/security/cve/CVE-2023-34462",
  "summary": "CVE-2023-34462 is fixed in 2 products on 1 platform, first by libnetty-java 1:4.1.48-9, released June 22, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "netty: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high perfor...",
  "description": "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers \u0026 clients. The \u0060SniHandler\u0060 can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the \u0060SniHandler\u0060 to allocate 16MB of heap. The \u0060SniHandler\u0060 class is a handler that waits for the TLS handshake to configure a \u0060SslHandler\u0060 according to the indicated server name by the \u0060ClientHello\u0060 record. For this matter it allocates a \u0060ByteBuf\u0060 using the value defined in the \u0060ClientHello\u0060 record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the \u0060SslClientHelloHandler\u0060. This vulnerability has been fixed in version 4.1.94.Final.",
  "published": "2023-06-22T16:15:00Z",
  "severity": "medium",
  "cvss": 6.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.02459,
  "epssPercentile": 0.84546,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libnetty-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:4.1.48-4\u002Bdeb11u2build0.22.04.1",
      "fix": "libnetty-java 1:4.1.48-4\u002Bdeb11u2build0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libnetty-java-1-4.1.48-4-deb11u2build0.22.04.1",
      "released": "2023-10-09T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libnetty-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:4.1.48-9",
      "fix": "libnetty-java 1:4.1.48-9",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libnetty-java-1-4.1.48-9",
      "released": "2023-06-22T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "netty",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "1:4.1.48-4\u002Bdeb11u2",
      "fix": "DSA-5558-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5558-1",
      "released": "2023-11-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "netty",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1:4.1.48-7\u002Bdeb12u1",
      "fix": "DSA-5558-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5558-1",
      "released": "2023-11-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "netty",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:4.1.48-8",
      "fix": "DEBIAN-CVE-2023-34462",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34462",
      "released": "2023-06-22T23:15:09Z"
    },
    {
      "platform": "linux",
      "product": "netty",
      "release": "Debian 14",
      "fixedVersion": "1:4.1.48-8",
      "fix": "DEBIAN-CVE-2023-34462",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34462",
      "released": "2023-06-22T23:15:09Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}