https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 02:55:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-93575 <p><strong>Affected:</strong> Red Hat AMQ Broker 7, Red Hat build of Apache Camel for Spring Boot 4, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat Single Sign-On 7</p> <p>A flaw was found in Netty&#39;s MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the &#39;Properties Length&#39; against the &#39;Remaining Length&#39;, allowing an attacker to bypass size limits. This leads to excessive memory and CPU consumption, resulting in a denial of service (DoS) due to an OutOfMemoryError.</p> <p><strong>Affected:</strong> Red Hat AMQ Broker 7, Red Hat build of Apache Camel for Spring Boot 4, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat Single Sign-On 7</p> <p>A flaw was found in Netty&#39;s MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the &#39;Properties Length&#39; against the &#39;Remaining Length&#39;, allowing an attacker to bypass size limits. This leads to excessive memory and CPU consumption, resulting in a denial of service (DoS) due to an OutOfMemoryError.</p> https://vulnerability.circl.lu/vuln/cve-2026-93575