[
https://issues.apache.org/jira/browse/KNOX-2589?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tamás Hanicz resolved KNOX-2589.
--------------------------------
Resolution: Duplicate
> Upgrade to version io.netty:netty-codec:4.1.46.Final
> ----------------------------------------------------
>
> Key: KNOX-2589
> URL: https://issues.apache.org/jira/browse/KNOX-2589
> Project: Apache Knox
> Issue Type: Improvement
> Reporter: Akshay Kotecha Jain
> Priority: Trivial
>
> The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory
> allocation while decoding a Zlib Encoded byte stream. An attacker could send
> a large ZlibEncoded byte stream to the Netty server, forcing the server to
> allocate all of its free memory to a single decoder
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
