CVE-2014-0193 – netty: DoS via memory exhaustion during data aggregation

https://notcve.org/view.php?id=CVE-2014-0193

06 May 2014 — WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames. WebSocket08FrameDecoder en Netty 3.6.x anterior a 3.6.9, 3.7.x anterior a 3.7.1, 3.8.x anterior a 3.8.2, 3.9.x anterior a 3.9.1 y 4.0.x anterior a 4.0.19 permite a atacantes remotos causar una denegación de servicio (c... • http://netty.io/news/2014/04/30/release-day.html • CWE-399: Resource Management Errors CWE-400: Uncontrolled Resource Consumption •