Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS() in TelnetIO.java:856-879 reads client-supplied width and height as 16-bit unsigned integers and passes values such as 65535x65535 to setTerminalGeometry(), allowing an unauthenticated remote attacker to repeatedly alternate values and trigger continuous expensive rendering work that causes CPU exhaustion and denial of service. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-17 | 2 | Disclosure2 |
| 2026-07-18 | 1 | Disclosure1 |
CVE-2026-56741 Unauthenticated Denial of Service via Terminal Dimension Overflow in JLine3 Telnet Server https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56741
Post summary
The posting announces CVE‑2026‑56741, detailing an unauthenticated denial‑of‑service vulnerability caused by a terminal dimension overflow in the JLine3 Telnet Server.
🚨*CVE* CVE-2026-56741 JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound t… https://www.cve.org/CVERecord?id=CVE-2026-56741 ----- Traducción: CVE-2026-56741 JLi… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑56741 affecting JLine versions prior to 3.30.14, 4.0.16, and 4.2.1, noting a missing upper bound check in the Telnet module, but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-56741 JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound t… https://www.cve.org/CVERecord?id=CVE-2026-56741
Post summary
The post announces CVE‑2026‑56741, a missing upper bound check in JLine’s Telnet server, lists affected versions that fix the issue, and provides no evidence of exploits or active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jline | jline | - | - | - |