Threats tagged 'ghsa-6ff9-6jw2-jrgf'

A vulnerability in Netty's HTTP/2 HpackEncoder allows a remote attacker to cause a Denial of Service (DoS) by sending HTTP/2 SETTINGS frames with an excessively large MAX_HEADER_TABLE_SIZE. This leads to the encoder storing a large number of unique headers, increasing CPU and memory usage. The issue has a medium severity rating with a CVSS score of 5.3. A security update addressing this vulnerability is available in Red Hat build of Quarkus 3.33.3.SP2.