Netty SNI Handler Vulnerability Allows for Large Memory Allocation

What Happened

A vulnerability was discovered in Netty's SNI handler that allows for large memory allocation from a small amount of attacker-controlled data.

Who Is Affected

Users of Netty who utilize the SNI handler are potentially affected by this vulnerability.

Severity & Impact

The severity of this vulnerability is rated as high. A successful attack could lead to a denial-of-service due to excessive memory allocation.

Mitigation

Users should update to a version of Netty that includes a fix for this vulnerability, such as Netty 4.1.135.Final.