[ZOOKEEPER-4554] CVE-2022-24823 in netty 4.1.76.Final

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.7.1
• Labels: cve pull-request-available
• Assignee: Ananya Singh
• Reporter: Dominique Mongelli
• Created: 08/Jun/22 08:48
• Updated: 16/Jun/23 19:55

Description

Netty reported a new MEDIUM CVE: https://github.com/netty/netty/security/advisories/GHSA-269q-hmxg-m83q

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-24823

It is fixed in netty 4.1.77.Final.

It should be noted that this CVE impacts applications running on Java 6 or lower.

 

 

 

Issue Links

• is duplicated by: ZOOKEEPER-4555 Upgrade Netty to 4.1.77 ror CVE-2022-24823
• links to: GitHub Pull Request #1953