{
  "cveId": "CVE-2025-24970",
  "url": "https://patchblox.com/security/cve/CVE-2025-24970",
  "summary": "CVE-2025-24970 is fixed in 2 products on 1 platform, first by SUSE-SU-2025:0590-1, released February 19, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "netty: This update for netty, netty-tcnative fixes the following issues:\n\n- CVE-2025-24970: incorrect validation of packets...",
  "description": "This update for netty, netty-tcnative fixes the following issues:\n\n- CVE-2025-24970: incorrect validation of packets by SslHandler can lead to a native crash. (bsc#1237037)\n- CVE-2025-25193: unsafe reading of environment files can lead to an application crash. (bsc#1237038)\n\nUpdate to netty version 4.1.118 and netty-tcnative version 2.0.70 Final.\n    \nOther fixes:\n\n- Fix recycling in CodecOutputList.    \n- StreamBufferingEncoder: do not send header frame with priority by default.\n- Notify event loop termination future of unexpected exceptions.\n- Fix AccessControlException in GlobalEventExecutor.\n- AdaptivePoolingAllocator: round chunk sizes up and reduce chunk release frequency.\n- Support BouncyCastle FIPS for reading PEM files.\n- Dns: correctly encode DnsPtrRecord.\n- Provide Brotli settings without com.aayushatharva.brotli4j dependency.\n- Make DefaultResourceLeak more resilient against OOM.\n- OpenSslSession: add support to defensively check for peer certs.\n- SslHandler: ensure buffers are never leaked when wrap(...) produces SSLException.\n- Correcly handle comments appended to nameserver declarations.\n- PcapWriteHandler: apply fixes so that the handler can append to an existing PCAP file when writing the global header.\n- PcapWriteHandler: allow output of PCAP files larger than 2GB.\n- Fix bugs in BoundedInputStream.\n- Fix HTTP header validation bug.\n- AdaptivePoolingAllocator: fix possible race condition in method offerToQueue(...).\n- AdaptivePoolingAllocator: make sure the sentinel object Magazine.MAGAZINE_FREED not be replaced.\n- Only try to use Zstd and Brotli if the native libs can be loaded.\n- Bump BlockHound version to 1.0.10.RELEASE.\n- Add details to TooLongFrameException message.\n- AdaptivePoolingAllocator: correctly reuse chunks.\n- AdaptivePoolingAllocator: don\u0027t fail when we run on a host with 1 core.\n- AdaptivePoolingAllocator: correctly re-use central queue chunks and avoid OOM issue.\n- Fix several memory management (leaks and missing checks) issues.",
  "published": "2025-02-19T10:34:01Z",
  "severity": "",
  "epss": 0.02192,
  "epssPercentile": 0.82577,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "netty",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "4.1.118-150200.4.29.2",
      "fix": "SUSE-SU-2025:0590-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0590-1",
      "released": "2025-02-19T10:34:01Z"
    },
    {
      "platform": "linux",
      "product": "netty",
      "release": "sles 15.6",
      "fixedVersion": "4.1.118-150200.4.29.2",
      "fix": "SUSE-SU-2025:0590-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0590-1",
      "released": "2025-02-19T10:34:01Z"
    },
    {
      "platform": "linux",
      "product": "netty-tcnative",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.0.70-150200.3.25.1",
      "fix": "SUSE-SU-2025:0590-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0590-1",
      "released": "2025-02-19T10:34:01Z"
    },
    {
      "platform": "linux",
      "product": "netty-tcnative",
      "release": "sles 15.6",
      "fixedVersion": "2.0.70-150200.3.25.1",
      "fix": "SUSE-SU-2025:0590-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0590-1",
      "released": "2025-02-19T10:34:01Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}