Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This exhausts the server's direct memory pool (OutOfDirectMemoryError), preventing legitimate connections from being processed. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-08 | 1 | General1 |
| 2026-06-12 | 1 | Disclosure1 |
CVE-2026-44890 - Netty has Unbounded Direct Memory Consumption in its RedisDecoder #NerdieNews #CyberSecurity #InfoSec https://t.co/JzEBiZjEQ2
Post summary
The tweet announces CVE-2026-44890, noting an unbounded direct memory consumption flaw in Netty's RedisDecoder, but offers no PoC, exploit, patch, or evidence of active exploitation.
🔴 Netty, Denial of Service (DoS), #CVE-2026-44890 (High) -DC-Jun2026-282 https://dailycve.com/netty-denial-of-service-dos-cve-2026-44890-high-dc-jun2026-282/
Post summary
The entry notes the high‑severity CVE‑2026‑44890 DoS vulnerability in Netty but provides no PoC, exploit, patch, or active exploitation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | netty | netty | - | - | - |