{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44891.json" } ], "title": "io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder", "tracking": { "current_release_date": "2026-08-13T22:03:01+00:00", "generator": { "date": "2026-08-13T22:03:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.15" } }, "id": "CVE-2026-44891", "initial_release_date": "2026-07-17T20:16:24.486000+00:00", "revision_history": [ { "date": "2026-07-17T20:16:24.486000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-07-28T06:41:54+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-08-13T22:03:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Data Grid 8", "product": { "name": "Red Hat Data Grid 8", "product_id": "red_hat_data_grid_8", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_family", "name": "Red Hat Data Grid 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 7", "product": { "name": "Red Hat JBoss Enterprise Application Platform 7", "product_id": "red_hat_jboss_enterprise_application_platform_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product": { "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "category": "product_name", "name": "Red Hat Single Sign-On 7", "product": { "name": "Red Hat Single Sign-On 7", "product_id": "red_hat_single_sign-on_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7" } } } ], "category": "product_family", "name": "Red Hat Single Sign-On 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16", "product": { "name": "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16", "product_id": "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_spring_boot:4.18" } } } ], "category": "product_family", "name": "Red Hat Build of Apache Camel" }, { "category": "product_version", "name": "netty-codec-stomp", "product": { "name": "netty-codec-stomp", "product_id": "netty-codec-stomp", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-stomp@4.1.133.Final-redhat-00002" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "netty-codec-stomp as a component of Red Hat Data Grid 8", "product_id": "red_hat_data_grid_8:netty-codec-stomp" }, "product_reference": "netty-codec-stomp", "relates_to_product_reference": "red_hat_data_grid_8" }, { "category": "default_component_of", "full_product_name": { "name": "netty-codec-stomp as a component of Red Hat JBoss Enterprise Application Platform 7", "product_id": "red_hat_jboss_enterprise_application_platform_7:netty-codec-stomp" }, "product_reference": "netty-codec-stomp", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7" }, { "category": "default_component_of", "full_product_name": { "name": "netty-codec-stomp as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-stomp" }, "product_reference": "netty-codec-stomp", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "netty-codec-stomp as a component of Red Hat Single Sign-On 7", "product_id": "red_hat_single_sign-on_7:netty-codec-stomp" }, "product_reference": "netty-codec-stomp", "relates_to_product_reference": "red_hat_single_sign-on_7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-44891", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2026-07-17T21:03:04.480979+00:00", "flags": [ { "label": "component_not_present", "product_ids": [ "red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-stomp" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2501958" } ], "notes": [ { "category": "description", "text": "A flaw was found in Netty, a network application framework, specifically within the StompSubframeDecoder component. This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a large number of small headers. The decoder fails to properly limit the total number or cumulative size of headers per frame, leading to excessive memory consumption and ultimately crashing the server.", "title": "Vulnerability description" }, { "category": "summary", "text": "io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important denial of service vulnerability in Netty's StompSubframeDecoder component. A remote, unauthenticated attacker can exploit this flaw by sending a large number of small headers to a server exposing a STOMP endpoint. This can lead to excessive memory consumption, causing an OutOfMemoryError and resulting in a complete denial of service for the affected application.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16" ], "known_affected": [ "red_hat_data_grid_8:netty-codec-stomp", "red_hat_jboss_enterprise_application_platform_7:netty-codec-stomp", "red_hat_single_sign-on_7:netty-codec-stomp" ], "known_not_affected": [ "red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-stomp" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-44891" }, { "category": "external", "summary": "RHBZ#2501958", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501958" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44891", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44891" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44891", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44891" }, { "category": "external", "summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b", "url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b" }, { "category": "external", "summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6", "url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6" }, { "category": "external", "summary": "https://github.com/netty/netty/pull/17063", "url": "https://github.com/netty/netty/pull/17063" }, { "category": "external", "summary": "https://github.com/netty/netty/pull/17065", "url": "https://github.com/netty/netty/pull/17065" }, { "category": "external", "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final", "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final" }, { "category": "external", "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final", "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final" }, { "category": "external", "summary": "https://github.com/netty/netty/security/advisories/GHSA-vhch-2wf3-m8rp", "url": "https://github.com/netty/netty/security/advisories/GHSA-vhch-2wf3-m8rp" } ], "release_date": "2026-07-17T20:16:24.486000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-08-13T14:50:50+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16" ], "url": "https://access.redhat.com/errata/RHSA-2026:54622" }, { "category": "workaround", "details": "To reduce the risk of this denial of service, restrict network access to any services that expose a STOMP endpoint and use Netty's `StompSubframeDecoder`. Implement firewall rules or network access controls to permit connections only from trusted sources. This action limits the ability of untrusted remote clients to exploit the vulnerability.", "product_ids": [ "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16", "red_hat_data_grid_8:netty-codec-stomp", "red_hat_jboss_enterprise_application_platform_7:netty-codec-stomp", "red_hat_single_sign-on_7:netty-codec-stomp" ] }, { "category": "none_available", "details": "Fix deferred", "product_ids": [ "red_hat_jboss_enterprise_application_platform_7:netty-codec-stomp", "red_hat_single_sign-on_7:netty-codec-stomp" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_data_grid_8:netty-codec-stomp" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16", "red_hat_data_grid_8:netty-codec-stomp", "red_hat_jboss_enterprise_application_platform_7:netty-codec-stomp", "red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-stomp", "red_hat_single_sign-on_7:netty-codec-stomp" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "Red Hat build of Apache Camel 4.18.3 for Spring Boot 3.5.16", "red_hat_data_grid_8:netty-codec-stomp", "red_hat_jboss_enterprise_application_platform_7:netty-codec-stomp", "red_hat_jboss_enterprise_application_platform_expansion_pack:netty-codec-stomp", "red_hat_single_sign-on_7:netty-codec-stomp" ] } ], "title": "io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder" } ] }