kritik
CVE-2026-45674
netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
GHSA8.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Red Hat8.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: GHSA (yüksek), Red Hat (yüksek), Ubuntu (orta).
Açıklama
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| chainguard | airbyte-server, airbyte-server-fips, akhq ve 83 tane daha | 2.0.0-r1 ve 73 tane daha |
| debian 11 | netty | düzeltme belirtilmemiş |
| debian 12 | netty | düzeltme belirtilmemiş |
| debian 13 | netty | düzeltme belirtilmemiş |
| debian 14 | netty | düzeltme belirtilmemiş |
| echo | netty | düzeltme belirtilmemiş |
| echo maven::Echo OSV | io.netty:netty-resolver-dns | 4.1.135.Final |
| maven::GitHub Security Advisory Maven | io.netty:netty-resolver-dns | 4.2.15.Final, 4.1.135.Final |
| minimos | apache-druid, apache-druid-fips, apache-iceberg-sink-connector ve 39 tane daha | 38.0.0-r0 ve 24 tane daha |
| rapidfort debian 12 | netty | düzeltme belirtilmemiş |
| rapidfort debian 13 | netty | düzeltme belirtilmemiş |
| ubuntu 18.04-ESM | netty | düzeltme belirtilmemiş |
13 kaynaktaki 160 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| chainguard | airbyte-server | 2.0.0-r1 |
| chainguard | airbyte-server-fips | 2.0.0-r1 |
| chainguard | akhq | 0.27.1-r3 |
| chainguard | apache-hop | 2.18.0-r4 |
| chainguard | apache-hop-fips | 2.18.0-r4 |
| chainguard | apache-nifi | 2.9.0-r14 |
| chainguard | apache-pulsar-4.0 | 4.0.11-r0 |
| chainguard | apache-pulsar-4.1 | 4.1.3-r15 |
| chainguard | apache-pulsar-4.2 | 4.2.2-r3 |
| chainguard | apache-pulsar-fips-4.0 | 4.0.11-r2 |
| chainguard | apicurio-registry | 3.3.0-r3 |
| chainguard | camunda-8.8 | 8.8.27-r1 |
| chainguard | camunda-8.9 | 8.9.6-r1 |
| chainguard | camunda-zeebe-8.6 | 8.6.39-r6 |
| chainguard | camunda-zeebe-8.7 | 8.7.30-r1 |
| chainguard | camunda-zeebe-8.8 | 8.8.26-r0 |
| chainguard | camunda-zeebe-8.9 | 8.9.6-r1 |
| chainguard | celeborn-0.5 | 0.5.4-r26 |
| chainguard | celeborn-0.6 | 0.6.3-r8 |
| chainguard | celeborn-0.7 | 0.7.0-r4 |
| chainguard | commercial-elasticsearch-8.19 | 8.19.17-r0 |
| chainguard | commercial-elasticsearch-9.3 | 9.3.6-r0 |
| chainguard | commercial-elasticsearch-9.4 | 9.4.3-r0 |
| chainguard | druid | 37.0.0-r56 |
| chainguard | elasticsearch-8.19 | 8.19.16-r1 |
| chainguard | elasticsearch-9.2 | 9.2.8-r13 |
| chainguard | elasticsearch-9.3 | 9.3.7-r1 |
| chainguard | elasticsearch-9.4 | 9.4.2-r2 |
| chainguard | elasticsearch-fips-8.19 | 8.19.16-r1 |
| chainguard | elasticsearch-fips-9.3 | 9.3.7-r1 |
| chainguard | elasticsearch-fips-9.4 | 9.4.2-r3 |
| chainguard | flyway | 12.8.1-r4 |
| chainguard | flyway-fips | 12.8.1-r2 |
| chainguard | hadoop-fips-3.5 | 3.5.0-r3 |
| chainguard | hono | 2.7.0-r22 |
| chainguard | infinispan-15.0 | 15.0.22-r11 |
| chainguard | infinispan-15.1 | 15.1.7-r20 |
| chainguard | infinispan-15.2 | 15.2.6-r19 |
| chainguard | infinispan-16.1 | 16.1.4-r3 |
| chainguard | kafbat-ui | 1.5.0-r1 |
| chainguard | kafbat-ui-fips | 1.5.0-r6 |
| chainguard | kafka-bridge | 1.0.0-r6 |
| chainguard | kafka-bridge-fips | 1.0.0-r3 |
| chainguard | kayenta-2025.4 | 2025.4.6-r1 |
| chainguard | kayenta-2026.0 | 2026.0.4-r1 |
| chainguard | kayenta-2026.1 | 2026.1.1-r1 |
| chainguard | kayenta-fips-2025.4 | 2025.4.3-r10 |
| chainguard | kayenta-fips-2026.0 | 2026.0.4-r1 |
| chainguard | kayenta-fips-2026.1 | 2026.1.1-r1 |
| chainguard | keycloak-26.6 | 26.6.3-r3 |
| chainguard | keycloak-fips-26.6 | 26.6.3-r3 |
| chainguard | knative-kafka-broker-1.20 | 1.20.3-r6 |
| chainguard | knative-kafka-broker-1.21 | 1.21.4-r4 |
| chainguard | knative-kafka-broker-1.22 | 1.22.1-r4 |
| chainguard | knative-kafka-broker-fips-1.20 | 1.20.3-r6 |
| chainguard | knative-kafka-broker-fips-1.21 | 1.21.3-r10 |
| chainguard | knative-kafka-broker-fips-1.22 | 1.22.1-r4 |
| chainguard | management-api-for-apache-cassandra-4.0 | 0.1.117-r3 |
| chainguard | management-api-for-apache-cassandra-4.1 | 0.1.117-r2 |
| chainguard | management-api-for-apache-cassandra-5.0 | 0.1.120-r0 |
| chainguard | opensearch-2 | 2.19.5-r1 |
| chainguard | opensearch-3 | 3.8.0-r3 |
| chainguard | opensearch-fips-3 | 3.7.0-r0 |
| chainguard | pinot | 1.5.0-r16 |
| chainguard | pinot-fips | 1.5.0-r11 |
| chainguard | request-9047-keycloak-fips-26.4 | 26.4.7-r17 |
| chainguard | request-9047-keycloak-fips-26.5 | 26.5.7-r6 |
| chainguard | request-9047-keycloak-fips-26.6 | 26.6.3-r2 |
| chainguard | s3proxy | 3.1.0-r9 |
| chainguard | s3proxy-fips | 3.1.0-r8 |
| chainguard | seata | 2.6.0-r13 |
| chainguard | selenium | 4.44.0-r2 |
| chainguard | sonarqube | 26.8.0.126808-r0 |
| chainguard | spark-4.0 | 4.0.3-r1 |
| chainguard | spark-4.1 | 4.1.2-r4 |
| chainguard | spark-fips-4.1 | 4.1.2-r3 |
| chainguard | spark-kubernetes-operator | 0.9.0-r1 |
| chainguard | spark-kubernetes-operator-fips | 0.9.0-r1 |
| chainguard | strimzi-kafka-operator | 1.0.0-r7 |
| chainguard | strimzi-kafka-operator-fips | 1.0.0-r3 |
| chainguard | tez | 0.10.5-r16 |
| chainguard | thingsboard | 4.3.1.2-r5 |
| chainguard | tinkerpop | 3.8.1-r2 |
| chainguard | trino | 483-r7 |
| chainguard | wildfly | 40.0.0-r3 |
| chainguard | zipkin | 3.6.1-r10 |
| debian 11 | netty | düzeltme belirtilmemiş |
| debian 12 | netty | düzeltme belirtilmemiş |
| debian 13 | netty | düzeltme belirtilmemiş |
| debian 14 | netty | düzeltme belirtilmemiş |
| echo | netty | düzeltme belirtilmemiş |
| echo maven::Echo OSV | io.netty:netty-resolver-dns | 4.1.135.Final |
| maven::GitHub Security Advisory Maven | io.netty:netty-resolver-dns | 4.2.15.Final, 4.1.135.Final |
| minimos | apache-druid | 38.0.0-r0 |
| minimos | apache-druid-fips | 38.0.0-r0 |
| minimos | apache-iceberg-sink-connector | 1.12.0-r0 |
| minimos | apache-iceberg-sink-connector-fips | 1.12.0-r0 |
| minimos | apache-nifi | 2.10.0-r0 |
| minimos | apache-polaris | 1.6.0-r0 |
| minimos | apache-polaris-fips | 1.6.0-r0 |
| minimos | apicurio-registry | 3.3.1-r0 |
| minimos | apicurio-registry-fips | 3.3.1-r0 |
| minimos | camunda-8.8 | 8.8.29-r0 |
| minimos | cdc-apache-cassandra-5.0 | 2.3.9-r0 |
| minimos | cdc-apache-cassandra-fips-5.0 | 2.3.9-r0 |
| minimos | conductor | 3.32.1-r0 |
| minimos | conductor-fips | 3.32.1-r0 |
| minimos | datahub-frontend-react | 1.7.0-r0 |
| minimos | datahub-frontend-react-fips | 1.7.0-r0 |
| minimos | datahub-upgrade | 1.7.0-r0 |
| minimos | datahub-upgrade-fips | 1.7.0-r0 |
| minimos | elasticsearch-8.19 | 8.19.17-r0 |
| minimos | elasticsearch-9.4 | 9.4.3-r0 |
| minimos | elasticsearch-fips-8.19 | 8.19.17-r0 |
| minimos | elasticsearch-fips-9.4 | 9.4.3-r0 |
| minimos | keycloak | 26.6.3-r1 |
| minimos | keycloak-fips | 26.6.3-r1 |
| minimos | knative-kafka-broker-dispatcher-loom-1.22 | 1.22.2-r0 |
| minimos | knative-kafka-broker-dispatcher-loom-fips-1.22 | 1.22.2-r0 |
| minimos | knative-kafka-broker-receiver-loom-1.21 | 1.21.4-r1 |
| minimos | knative-kafka-broker-receiver-loom-1.22 | 1.22.2-r0 |
| minimos | knative-kafka-broker-receiver-loom-fips-1.22 | 1.22.2-r0 |
| minimos | linstor-server | 1.35.0-r0 |
| minimos | linstor-server-fips | 1.35.0-r0 |
| minimos | opensearch-2 | 2.19.6-r0 |
| minimos | opensearch-3 | 3.7.0-r0 |
| minimos | sonarqube | 26.8.0.126808-r0 |
| minimos | stargate | 2.0.51-r2 |
| minimos | strimzi-kafka-bridge | 1.0.0-r1 |
| minimos | strimzi-kafka-bridge-fips | 1.1.0-r0 |
| minimos | strimzi-kafka-operator | 1.0.1-r3 |
| minimos | strimzi-kafka-operator-0.45 | 0.45.2-r6 |
| minimos | strimzi-kafka-operator-fips | 1.0.1-r2 |
| minimos | trino | 481-r2 |
| minimos | trino-fips | 481-r2 |
| rapidfort debian 12 | netty | düzeltme belirtilmemiş |
| rapidfort debian 13 | netty | düzeltme belirtilmemiş |
| ubuntu 18.04-ESM | netty | düzeltme belirtilmemiş |
| wolfi | akhq | 0.27.1-r3 |
| wolfi | apache-nifi | 2.9.0-r14 |
| wolfi | apache-pulsar-4.1 | 4.1.3-r15 |
| wolfi | apache-pulsar-4.2 | 4.2.2-r3 |
| wolfi | apicurio-registry | 3.3.0-r3 |
| wolfi | celeborn-0.6 | 0.6.3-r8 |
| wolfi | druid | 37.0.0-r56 |
| wolfi | flyway | 12.8.1-r4 |
| wolfi | infinispan-16.1 | 16.1.4-r3 |
| wolfi | keycloak-26.6 | 26.6.3-r3 |
| wolfi | management-api-for-apache-cassandra-5.0 | 0.1.120-r0 |
| wolfi | opensearch-3 | 3.8.0-r3 |
| wolfi | selenium | 4.44.0-r2 |
| wolfi | sonarqube | 26.8.0.126808-r0 |
| wolfi | spark-4.0 | 4.0.3-r1 |
| wolfi | spark-4.1 | 4.1.2-r4 |
| wolfi | strimzi-kafka-operator | 1.0.0-r7 |
| wolfi | tez | 0.10.5-r16 |
| wolfi | thingsboard | 4.3.1.2-r5 |
| wolfi | trino | 483-r7 |
| wolfi | wildfly | 40.0.0-r3 |
| wolfi | zipkin | 3.6.1-r10 |
Referanslar
- https://access.redhat.com/errata/RHSA-2026:26017
- https://access.redhat.com/errata/RHSA-2026:26018
- https://access.redhat.com/errata/RHSA-2026:26586
- https://access.redhat.com/errata/RHSA-2026:34608
- https://access.redhat.com/errata/RHSA-2026:37390
- https://access.redhat.com/errata/RHSA-2026:41951
- https://access.redhat.com/errata/RHSA-2026:48151
- https://access.redhat.com/errata/RHSA-2026:49700
27 referansın hepsi
- https://access.redhat.com/errata/RHSA-2026:49701
- https://access.redhat.com/errata/RHSA-2026:50085
- https://access.redhat.com/errata/RHSA-2026:53644
- https://access.redhat.com/errata/RHSA-2026:53645
- https://access.redhat.com/errata/RHSA-2026:53646
- https://access.redhat.com/errata/RHSA-2026:53806
- https://access.redhat.com/errata/RHSA-2026:54435
- https://access.redhat.com/errata/RHSA-2026:62260
- https://access.redhat.com/errata/RHSA-2026:65126
- https://access.redhat.com/security/cve/CVE-2026-45674
- https://advisory.echohq.com/cve/CVE-2026-45674
- https://bugzilla.redhat.com/show_bug.cgi?id=2488400
- https://github.com/netty/netty
- https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
- https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
- https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc
- https://nvd.nist.gov/vuln/detail/CVE-2026-45674
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45674.json
- https://www.cve.org/CVERecord?id=CVE-2026-45674