https://vulnerability.circl.lu/sightings/feed 2026-08-08T12:44:59.236722+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/289ca3d9-bee8-4ede-a0c5-069d78d29e89/export 2026-08-08T12:44:59.260474+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "289ca3d9-bee8-4ede-a0c5-069d78d29e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56818", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-p9jm-q85p-7mcp", "content": "", "creation_timestamp": "2026-08-07T18:35:07.406055Z"} 2026-08-07T18:35:07.406055+00:00 https://vulnerability.circl.lu/sighting/e8b4da5e-3550-4362-923a-0e5495fa7feb/export 2026-08-08T12:44:59.262874+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8b4da5e-3550-4362-923a-0e5495fa7feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56818", "type": "seen", "source": "https://gist.github.com/alon710/8c320d44f4f97b648e1d03dded62d53e", "content": "# CVE-2026-56818: CVE-2026-56818: Denial of Service via Memory Pinning in Netty Redis Array Aggregator\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-56818\n\n## Summary\nA vulnerability in Netty's Redis codec allows remote unauthenticated attackers to cause a memory-pinning Denial of Service (DoS) due to the failure to release partial aggregate state when specific error conditions occur in RedisArrayAggregator. When processing Redis Serialization Protocol (RESP) messages, the aggregator fails to clear internal queues and release retained direct byte buffers on exception paths triggered by exceeded maxElements or invalid length properties. If the pipeline does not explicitly tear down the connection upon detecting a decoder error, subsequent elements continue utilizing the stale context, allowing memory blocks to remain indefinitely pinned.\n\n## TL;DR\nNetty's Redis array aggregator fails to release pooled direct buffers upon specific limit-validation errors, allowing remote attackers to pin system memory and induce a Denial of Service.\n\n## Technical Details\n\n- **CWE ID**: CWE-401, CWE-703\n- **Attack Vector**: Network (AV:N)\n- **CVSS Base Score**: 6.5\n- **Impact Type**: Denial of Service (Memory Exhaustion)\n- **Exploit Status**: No public PoC available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Servers running Netty with Redis Serialization Protocol aggregation enabled\n- **Netty**: < 4.1.136.Final (Fixed in: `4.1.136.Final`)\n- **Netty**: >= 4.2.0-Final, < 4.2.16.Final (Fixed in: `4.2.16.Final`)\n\n## Mitigation\n\n- Upgrade Netty to safe version releases\n- Implement strict channel teardown upon detecting codec errors\n- Monitor direct buffer allocator telemetry\n\n**Remediation Steps:**\n1. Identify and update all netty-codec-redis dependencies to 4.1.136.Final or 4.2.16.Final\n2. Configure exception caught handlers in the channel pipeline to force-close connections on decoderexceptions\n3. Audit application dependencies to ensure no legacy transitive Netty packages remain active\n\n## References\n\n- [GitHub Security Advisory GHSA-p9jm-q85p-7mcp](https://github.com/netty/netty/security/advisories/GHSA-p9jm-q85p-7mcp)\n- [Netty Pull Request 17065](https://github.com/netty/netty/pull/17065)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-56818) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-07T18:31:18.171975Z"} 2026-08-07T18:31:18.171975+00:00