Search: CVE-2026-44893

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2026-44893In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a PP2_TYPE_SSL TLV High7.5EPSS 0.6%2026-06-12GCVE DatabaseCVE-2026-44893 A vulnerability in netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final allows an attacker to cause an IndexOutOfBoundsException by setting a PP2_TYPE_SSL TLV length below 5. This exception is not properly caught, leading to a retained slice on the pooled cumulation buffer never being released, which can cause resource exhaustion. The issue is patched in versions 4.1.135.Final and 4.2.15.Final. EPSS 0.6%Vulnerability	GCVE Database	2026-06-12

Page 1 of 1