{
  "cveId": "CVE-2026-55833",
  "url": "https://patchblox.com/security/cve/CVE-2026-55833",
  "summary": "CVE-2026-55833 is fixed in 43 products on 1 platform, first by SUSE-SU-2026:3482-1, released August 4, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "eap8-activemq-artemis: Netty is a network application framework for development of protocol servers and clients",
  "description": "Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded \u0060maxHeaderSize\u0060 and marked the frame truncated in \u0060SpdyFrameCodec\u0060, allowing a remote peer to send a small compressed \u0060HEADERS\u0060 block that expands into much larger raw header data and causes compression-amplified CPU and allocation churn. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final.",
  "published": "2026-07-20T23:18:07Z",
  "severity": "important",
  "cvss": 7.5,
  "epss": 0.00665,
  "epssPercentile": 0.52046,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "eap8-activemq-artemis",
      "release": "RHEL 10",
      "fixedVersion": "2.40.0-8.redhat_00024.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-apache-cxf",
      "release": "RHEL 10",
      "fixedVersion": "4.1.7-1.SP1_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-artemis-wildfly-integration",
      "release": "RHEL 10",
      "fixedVersion": "2.0.5-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-bouncycastle",
      "release": "RHEL 10",
      "fixedVersion": "1.85.0-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-cryptacular",
      "release": "RHEL 10",
      "fixedVersion": "1.2.7-1.redhat_00002.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-eap-product-conf-parent",
      "release": "RHEL 10",
      "fixedVersion": "801.8.0-1.GA_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-hibernate",
      "release": "RHEL 10",
      "fixedVersion": "6.6.54-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-httpcomponents-asyncclient",
      "release": "RHEL 10",
      "fixedVersion": "4.1.5-5.redhat_00008.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-ironjacamar",
      "release": "RHEL 10",
      "fixedVersion": "3.0.22-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-annotations",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-core",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-databind",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-dataformats-text",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-jaxrs-providers",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-modules-base",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jackson-modules-java8",
      "release": "RHEL 10",
      "fixedVersion": "2.18.9-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jakarta-xml-bind-api",
      "release": "RHEL 10",
      "fixedVersion": "4.0.5-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jaxb",
      "release": "RHEL 10",
      "fixedVersion": "4.0.7-4.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jaxbintros",
      "release": "RHEL 10",
      "fixedVersion": "2.1.0-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jboss-logging",
      "release": "RHEL 10",
      "fixedVersion": "3.6.3-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jboss-remoting",
      "release": "RHEL 10",
      "fixedVersion": "5.0.31-1.SP2_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jbossws-api",
      "release": "RHEL 10",
      "fixedVersion": "3.1.0-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jbossws-common-tools",
      "release": "RHEL 10",
      "fixedVersion": "2.2.0-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jbossws-cxf",
      "release": "RHEL 10",
      "fixedVersion": "7.4.0-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jbossws-jaxws-undertow-httpspi",
      "release": "RHEL 10",
      "fixedVersion": "3.0.1-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jbossws-spi",
      "release": "RHEL 10",
      "fixedVersion": "5.1.0-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-jsf-impl",
      "release": "RHEL 10",
      "fixedVersion": "4.0.11-2.SP1_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-log4j",
      "release": "RHEL 10",
      "fixedVersion": "2.25.4-1.redhat_00003.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-neethi",
      "release": "RHEL 10",
      "fixedVersion": "3.2.2-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-netty",
      "release": "RHEL 10",
      "fixedVersion": "4.1.136-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-netty-transport-native-epoll",
      "release": "RHEL 10",
      "fixedVersion": "4.1.136-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-nimbus-jose-jwt",
      "release": "RHEL 10",
      "fixedVersion": "9.37.4-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-parsson",
      "release": "RHEL 10",
      "fixedVersion": "1.1.9-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-saaj-impl",
      "release": "RHEL 10",
      "fixedVersion": "3.0.6-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-slf4j",
      "release": "RHEL 10",
      "fixedVersion": "2.0.18-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-undertow",
      "release": "RHEL 10",
      "fixedVersion": "2.3.26-2.SP3_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-wildfly",
      "release": "RHEL 10",
      "fixedVersion": "8.1.8-9.GA_redhat_00006.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-wildfly-elytron",
      "release": "RHEL 10",
      "fixedVersion": "2.6.11-1.Final_redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-wildfly-javadocs",
      "release": "RHEL 10",
      "fixedVersion": "8.1.1-12.GA_redhat_00048.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-ws-commons-XmlSchema",
      "release": "RHEL 10",
      "fixedVersion": "2.3.2-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "eap8-xml-security",
      "release": "RHEL 10",
      "fixedVersion": "3.0.6-1.redhat_00001.1.el10eap",
      "fix": "RHSA-2026:70230",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70230",
      "released": "2026-09-23T19:20:59Z"
    },
    {
      "platform": "linux",
      "product": "netty",
      "release": "sles 15.7",
      "fixedVersion": "4.1.136-150200.4.53.1",
      "fix": "SUSE-SU-2026:3482-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3482-1",
      "released": "2026-08-04T11:46:42Z"
    },
    {
      "platform": "linux",
      "product": "netty-tcnative",
      "release": "sles 15.6",
      "fixedVersion": "2.0.80-150200.3.48.1",
      "fix": "SUSE-SU-2026:3482-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3482-1",
      "released": "2026-08-04T11:46:42Z"
    },
    {
      "platform": "linux",
      "product": "netty-tcnative",
      "release": "sles 15.7",
      "fixedVersion": "2.0.80-150200.3.48.1",
      "fix": "SUSE-SU-2026:3482-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3482-1",
      "released": "2026-08-04T11:46:42Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}