netty Vulnerabilities and Affected Products
Vulnerabilities associated with netty-incubator-codec-quic.
Products
Clear product- netty75 vulnerabilities
- netty-incubator-codec-ohttp5 vulnerabilities
- io.netty:netty-codec-http21 vulnerability
- netty-incubator-codec-quic1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-29908MEDIUM | Netty QUIC hash collision DoS attackNetty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability (in the hash map used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs). This vulnerability is fixed in 0.0.71.Final. CWE-407Mar 31, 2025 | CVSS5.3v3.1 | EPSS0.545% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |