https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:41:26.936375+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-93563 fkie_cve-2026-93563 2026-09-29T19:41:27.237762+00:00

A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory accumulation within the client's Java Virtual Machine (JVM) heap, causing an `OutOfMemoryError` and a denial of service (DoS) due to a process crash.

 https://vulnerability.circl.lu/vuln/ghsa-mv3r-x43m-8mr7 GHSA-mv3r-x43m-8mr7 2026-09-29T19:41:27.237910+00:00

Unbounded multi-line response accumulation in SmtpResponseDecoder leads to memory-exhaustion DoS

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11882-1 openSUSE-SU-2026:11882-1 — netty-4.1.138-1.1 on GA media 2026-09-29T19:41:27.237962+00:00

netty-4.1.138-1.1 on GA media

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-93563 UBUNTU-CVE-2026-93563 2026-09-29T19:41:27.238027+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:Pro:20.04:LTS: netty, Ubuntu:Pro:22.04:LTS: netty, Ubuntu:Pro:24.04:LTS: netty, Ubuntu:Pro:26.04:LTS: netty

A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory accumulation within the client's Java Virtual Machine (JVM) heap, causing an `OutOfMemoryError` and a denial of service (DoS) due to a process crash.