PT-2023-4868 · Netty+4 · Netty+4

Vietj

·

Published

2023-06-20

·

Updated

2026-05-18

·

CVE-2023-34462

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.94.Final
Description The issue is related to the SniHandler class in Netty, which can allocate up to 16MB of heap for each channel during the TLS handshake. This can be exploited to cause a denial of service, potentially leading to an OutOfMemoryError. The SniHandler waits for the TLS handshake to configure a SslHandler according to the indicated server name by the ClientHello record, allocating a ByteBuf using the value defined in the ClientHello record. Normally, the value of the packet should be smaller than the handshake packet, but there are no checks done here, and it is possible to craft a packet that makes the SslClientHelloHandler allocate a large amount of memory.
Recommendations For versions prior to 4.1.94.Final, update to version 4.1.94.Final to fix the issue. As a temporary workaround, consider configuring an idle timeout handler to prevent excessive memory allocation. Restrict access to the SniHandler to minimize the risk of exploitation. Avoid using the SniHandler without proper configuration and monitoring to prevent potential denial of service attacks.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-05355
CLEANSTART-2026-CI66802
CLEANSTART-2026-DD05788
CLEANSTART-2026-GH89210
CLEANSTART-2026-KU61465
CLEANSTART-2026-LE11246
CLEANSTART-2026-RN56220
CLEANSTART-2026-SQ91016
CLEANSTART-2026-VH41554
CLEANSTART-2026-WK99982
CVE-2023-34462
DSA-5558-1
GHSA-6MJQ-H674-J845
OPENSUSE-SU-2023_2974-1
OPENSUSE-SU-2024:14442-1
RHSA-2023:5484
RHSA-2023:5485
RHSA-2023:5486
ROSA-SA-2023-2304
SUSE-SU-2023:2974-1
SUSE-SU-2023_2974-1
USN-6994-1

Affected Products

Linuxmint
Netty
Red Os
Suse
Ubuntu