PT-2024-32648 · Netty+1 · Netty+1

Amossys-Pgr

·

Published

2024-11-12

·

Updated

2026-05-18

·

CVE-2024-47535

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.115
Description The issue is related to an unsafe reading of environment files, potentially causing a denial of service in Netty. When loaded on a Windows application, Netty attempts to load a file that does not exist. If an attacker creates a large file, the Netty application crashes. The vulnerability is related to the normalizeOs() function in the PlatformDependent.java file, which does not verify the OS before reading C:etcos-release and C:usrlibos-release. An attacker can exploit this by creating a file larger than 1 GB in these locations, causing the Netty application to exceed the JVM memory limit and crash.
Recommendations For Netty versions prior to 4.1.115, update to version 4.1.115 or later to fix the vulnerability. As a temporary workaround, consider restricting access to the C:etcos-release and C:usrlibos-release files to prevent an attacker from creating a large file in these locations. Additionally, monitor the JVM memory usage to detect potential crashes caused by this issue.

Exploit

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CLEANSTART-2026-DD05788
CLEANSTART-2026-GH89210
CLEANSTART-2026-JW30455
CLEANSTART-2026-KU61465
CLEANSTART-2026-LE11246
CLEANSTART-2026-MM00120
CLEANSTART-2026-RN56220
CLEANSTART-2026-VH41554
CLEANSTART-2026-WG59699
CVE-2024-47535
GHSA-Q4H9-7RXJ-7GX2
GHSA-XQ3W-V528-46RV
OPENSUSE-SU-2024:14549-1
OPENSUSE-SU-2024_4407-1
RHSA-2025:3357
RHSA-2025:3465
RHSA-2025:4548
RHSA-2025:4549
RHSA-2025:4550
SUSE-SU-2024:4407-1
SUSE-SU-2024_4407-1
SUSE-SU-2025:01985-1
SUSE-SU-2025:01994-1

Affected Products

Netty
Suse