PT-2025-35822 · Netty+6 · Netty+6

Yawkat · Publicado 2025-09-03 · Atualizado 2026-06-04 · CVE-2025-58057

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Nome do Software Vulnerável e Versões Afetadas Versões do Netty 4.1.124.Final e inferiores Versões do Netty 4.2.4.Final e inferiores

Descrição O Netty é um framework para aplicações de rede assíncrono e orientado a eventos. Certos decodificadores de descompressão, incluindo o BrotliDecoder, podem alocar um grande número de buffers de bytes quando recebem uma entrada especialmente elaborada, potencialmente levando a uma negação de serviço. A função decompress no BrotliDecoder chama repetidamente pull, descomprimindo dados em blocos de 64KB, e os buffers resultantes permanecem alcançáveis até que ocorra um erro de out-of-memory (OOM).

Recomendações Atualize para a versão 4.1.125.Final do Netty ou superior. Atualize para a versão 4.2.5.Final do Netty ou superior.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

CWE-409

Identificadores relacionados

ALT-PU-2025-12309

ALT-PU-2025-13422

BDU:2025-12594

CLEANSTART-2026-DD05788

CLEANSTART-2026-GH89210

CLEANSTART-2026-GQ14179

CLEANSTART-2026-IA43044

CLEANSTART-2026-JU62349

CLEANSTART-2026-JW30455

CLEANSTART-2026-KM27583

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-MM00120

CLEANSTART-2026-RN56220

CLEANSTART-2026-SP91806

CLEANSTART-2026-SQ91016

CLEANSTART-2026-SV95049

CLEANSTART-2026-VH41554

CLEANSTART-2026-WG59699

CLEANSTART-2026-WK99982

CVE-2025-58057

ECHO-5B70-97C8-C749

GHSA-3P8M-J85Q-PGMJ

OPENSUSE-SU-2025:15520-1

SUSE-SU-2025:03114-1

SUSE-SU-2025_03114-1

USN-7918-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Netty

Red Os

Suse

Ubuntu

Referências · 433

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58057.json · Exploit
• https://github.com/netty/netty · Nota
• https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj · Aviso do Fabricante
• https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d · Correção
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GQ14179.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LE11246.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KU61465.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SP91806.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RN56220.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SQ91016.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WG59699.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SV95049.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GH89210.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DD05788.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KM27583.json · Nota