CVE-2025-24970: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

Analyzed

AliasesUBUNTU-CVE-2025-24970CGA-237j-xh2m-9hhxCGA-24q3-p2hm-cv2f+403 more

Published 10-02-2025Last modified 16-04-2025

Vulnerability summary

CVE-2025-24970 is a high (CVSS 7.5) Improper Input Validation vulnerability in netapp active_iq_unified_manager. EPSS estimates a 2.19% chance of exploitation in the next 30 days, higher than 82.4% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

2.19%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference

Timeline

10-02-2025
PublishedVulnerability first disclosed.
16-04-2025
Last modifiedVulnerability information updated.

Description

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.

CVSS metrics

6 scores · 6 sources · 1 version

v3.17.5

EPSS trend

Probability

2.19%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.19% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (vicarius.io)
Maturity: unknown
referenceUnverified
Exploit Reference (vicarius.io)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard200 products

akhq< 0.25.1-r3
apache-activemq-artemis< 2.39.0-r1
apache-activemq-artemis-compat< 2.39.0-r1
apache-nifi< 2.2.0-r2
apache-nifi-compat< 2.2.0-r2

apache-nifi-toolkit< 2.2.0-r2
apache-pulsar< 4.0.3-r0
apache-pulsar-compat< 4.0.3-r0
apicurio-registry< 3.0.6-r1
apicurio-registry-nginx-config< 3.0.6-r1
apicurio-registry-ui< 3.0.6-r1
cassandra-5.0All versions (No fix recorded)
cassandra-5.0-compatAll versions (No fix recorded)
cassandra-5.0-entrypoint-compatAll versions (No fix recorded)
cassandra-5.0-iamguarded-compatAll versions (No fix recorded)
cassandra-fips-5.0All versions (No fix recorded)
cassandra-fips-5.0-compatAll versions (No fix recorded)
cassandra-reaper< 3.8.0-r2
celeborn-0.5All versions (No fix recorded) | < 0.5.4-r26
celeborn-0.6< 0.6.3-r7
cloudwatch-exporter< 0.16.0-r3
cqlsh-5.0All versions (No fix recorded)
cqlsh-fips-5.0All versions (No fix recorded)
docker-selenium< 4.28.1.20250202-r1
docker-selenium-base< 4.28.1.20250202-r1
docker-selenium-compat< 4.28.1.20250202-r1
docker-selenium-distributor< 4.28.1.20250202-r1
docker-selenium-event-bus< 4.28.1.20250202-r1
docker-selenium-hub< 4.28.1.20250202-r1
docker-selenium-node-base< 4.28.1.20250202-r1
docker-selenium-node-chromium< 4.28.1.20250202-r1
docker-selenium-node-docker< 4.28.1.20250202-r1
docker-selenium-node-firefox< 4.28.1.20250202-r1
docker-selenium-router< 4.28.1.20250202-r1
docker-selenium-session-queue< 4.28.1.20250202-r1
docker-selenium-sessions< 4.28.1.20250202-r1
docker-selenium-standalone< 4.28.1.20250202-r1
docker-selenium-standalone-chrome< 4.28.1.20250202-r1
docker-selenium-standalone-chromium< 4.28.1.20250202-r1
docker-selenium-standalone-docker< 4.28.1.20250202-r1
docker-selenium-standalone-firefox< 4.28.1.20250202-r1
docker-selenium-supervisor-config< 4.28.1.20250202-r1
druid< 32.0.0-r5
druid-compat< 32.0.0-r5
elasticsearch-7< 7.17.27-r4
elasticsearch-7-iamguarded< 7.17.27-r4
flyway< 11.3.1-r1
hadoop-fips-3.4.2All versions (No fix recorded)
kafka_exporter-strimzi-compat< 0.47.0-r1
kafka-3.7< 3.7.2-r2
kafka-3.9< 3.9.0-r2
kafka-strimzi-compat< 0.47.0-r1
keycloak< 26.1.3-r0
knative-kafka-broker-1.17-dispatcher-loom< 1.17.3-r3
knative-kafka-broker-1.17-receiver-loom< 1.17.3-r3
kserve-modelmesh< 0.12.0-r33
logstash-8-with-output-opensearch< 8.17.2-r2
management-api-for-apache-cassandra-4.0< 0.1.97-r1
management-api-for-apache-cassandra-4.0-compat< 0.1.97-r1
management-api-for-apache-cassandra-4.1< 0.1.97-r1
management-api-for-apache-cassandra-4.1-compat< 0.1.97-r1
management-api-for-apache-cassandra-5.0< 0.1.97-r1
management-api-for-apache-cassandra-5.0-compat< 0.1.97-r1
neo4j-4.4< 4.4.46-r0
neo4j-5.26< 5.26.4-r0
neo4j-5.26-docker-publish< 5.26.4-r0
opensearch-2< 2.19.1-r0
opensearch-2-alerting< 2.19.1-r0
opensearch-2-analysis-icu< 2.19.1-r0
opensearch-2-analysis-kuromoji< 2.19.1-r0
opensearch-2-analysis-nori< 2.19.1-r0
opensearch-2-analysis-phonetic< 2.19.1-r0
opensearch-2-analysis-smartcn< 2.19.1-r0
opensearch-2-analysis-stempel< 2.19.1-r0
opensearch-2-analysis-ukrainian< 2.19.1-r0
opensearch-2-anomaly-detection< 2.19.1-r0
opensearch-2-asynchronous-search< 2.19.1-r0
opensearch-2-cross-cluster-replication< 2.19.1-r0
opensearch-2-crypto-kms< 2.19.1-r0
opensearch-2-custom-codecs< 2.19.1-r0
opensearch-2-discovery-azure-classic< 2.19.1-r0
opensearch-2-discovery-ec2< 2.19.1-r0
opensearch-2-discovery-gce< 2.19.1-r0
opensearch-2-entrypoint-compat< 2.19.1-r0
opensearch-2-geospatial< 2.19.1-r0
opensearch-2-identity-shiro< 2.19.1-r0
opensearch-2-index-management< 2.19.1-r0
opensearch-2-ingest-attachment< 2.19.1-r0
opensearch-2-job-scheduler< 2.19.1-r0
opensearch-2-k-nn< 2.19.1-r0
opensearch-2-mapper-annotated-text< 2.19.1-r0
opensearch-2-mapper-murmur3< 2.19.1-r0
opensearch-2-mapper-size< 2.19.1-r0
opensearch-2-ml-commons< 2.19.1-r0
opensearch-2-neural-search< 2.19.1-r0
opensearch-2-notifications< 2.19.1-r0
opensearch-2-observability< 2.19.1-r0
opensearch-2-performance-analyzer< 2.19.1-r0
opensearch-2-reporting< 2.19.1-r0
opensearch-2-repository-azure< 2.19.1-r0
opensearch-2-repository-gcs< 2.19.1-r0
opensearch-2-repository-s3< 2.19.1-r0
opensearch-2-security< 2.19.1-r0
opensearch-2-security-analytics< 2.19.1-r0
opensearch-2-sql< 2.19.1-r0
opensearch-2-store-smb< 2.19.1-r0
opensearch-2-telemetry-otel< 2.19.1-r0
opensearch-2-transport-nio< 2.19.1-r0
prometheus-jmx-exporter-strimzi-compat< 0.47.0-r1
seata-server< 2.7.0-r1
selenium< 4.28.0-r1
selenium-server< 4.28.0-r1
selenium-server-compat< 4.28.0-r1
selenium-server-standalone< 4.28.0-r1
sonarqube-10All versions (No fix recorded)
strimzi-kafka-operator< 0.47.0-r1
strimzi-kafka-operator-cluster-operator< 0.47.0-r1
strimzi-kafka-operator-kafka-agent< 0.47.0-r1
strimzi-kafka-operator-kafka-base< 0.47.0-r1
strimzi-kafka-operator-kafka-init< 0.47.0-r1
strimzi-kafka-operator-kafka-thirdparty-libs< 0.47.0-r1
strimzi-kafka-operator-kafka-thirdparty-libs-cc< 0.47.0-r1
strimzi-kafka-operator-topic-operator< 0.47.0-r1
strimzi-kafka-operator-tracing-agent< 0.47.0-r1
strimzi-kafka-operator-user-operator< 0.47.0-r1
tez< 0.10.5-r16
thingsboard< 3.9.1-r1
thingsboard-tb-js-executor< 3.9.1-r1
thingsboard-tb-mqtt-transport< 3.9.1-r1
thingsboard-tb-node< 3.9.1-r1
thingsboard-tb-web-ui< 3.9.1-r1
trino< 470-r3
trino-config< 470-r3
trino-oci-entrypoint< 470-r3
trino-plugin-ai-functions< 470-r3
trino-plugin-bigquery< 470-r3
trino-plugin-blackhole< 470-r3
trino-plugin-cassandra< 470-r3
trino-plugin-clickhouse< 470-r3
trino-plugin-delta-lake< 470-r3
trino-plugin-druid< 470-r3
trino-plugin-duckdb< 470-r3
trino-plugin-elasticsearch< 470-r3
trino-plugin-exasol< 470-r3
trino-plugin-exchange-filesystem< 470-r3
trino-plugin-exchange-hdfs< 470-r3
trino-plugin-faker< 470-r3
trino-plugin-functions-python< 470-r3
trino-plugin-geospatial< 470-r3
trino-plugin-google-sheets< 470-r3
trino-plugin-hive< 470-r3
trino-plugin-http-event-listener< 470-r3
trino-plugin-http-server-event-listener< 470-r3
trino-plugin-hudi< 470-r3
trino-plugin-iceberg< 470-r3
trino-plugin-ignite< 470-r3
trino-plugin-jmx< 470-r3
trino-plugin-kafka< 470-r3
trino-plugin-kafka-event-listener< 470-r3
trino-plugin-lakehouse< 470-r3
trino-plugin-ldap-group-provider< 470-r3
trino-plugin-loki< 470-r3
trino-plugin-mariadb< 470-r3
trino-plugin-memory< 470-r3
trino-plugin-ml< 470-r3
trino-plugin-mongodb< 470-r3
trino-plugin-mysql< 470-r3
trino-plugin-mysql-event-listener< 470-r3
trino-plugin-opa< 470-r3
trino-plugin-openlineage< 470-r3
trino-plugin-opensearch< 470-r3
trino-plugin-oracle< 470-r3
trino-plugin-password-authenticators< 470-r3
trino-plugin-pinot< 470-r3
trino-plugin-postgresql< 470-r3
trino-plugin-prometheus< 470-r3
trino-plugin-ranger< 470-r3
trino-plugin-redis< 470-r3
trino-plugin-redshift< 470-r3
trino-plugin-resource-group-managers< 470-r3
trino-plugin-session-property-managers< 470-r3
trino-plugin-singlestore< 470-r3
trino-plugin-snowflake< 470-r3
trino-plugin-spooling-filesystem< 470-r3
trino-plugin-sqlserver< 470-r3
trino-plugin-teradata-functions< 470-r3
trino-plugin-thrift< 470-r3
trino-plugin-tpcds< 470-r3
trino-plugin-tpch< 470-r3
trino-plugin-vertica< 470-r3
wavefront-proxy< 13.7-r5
wavefront-proxy-compat< 13.7-r5
wavefront-proxy-config< 13.7-r5
wavefront-proxy-licenses< 13.7-r5
wildfly< 35.0.1-r12
wildfly-openjdk-17< 35.0.1-r12
wildfly-openjdk-17-compat< 35.0.1-r12
wildfly-openjdk-21< 35.0.1-r12
wildfly-openjdk-21-compat< 35.0.1-r12
zookeeper-3.8< 3.8.4-r1 | < 3.8.4.0-r7

Show all 200

1 vendor · 200 products · Showing 200 of 352

References

11 links

github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhwX Refsource CONFIRMREPORTAdvisoryWEBVendor Advisory
github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4X Refsource MISCREPORTFIXWEBPatch
security.netapp.com/advisory/ntap-20250221-0005/AdvisoryThird Party Advisory
www.vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-detectionWEBExploitThird Party Advisory
www.vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-mitigationWEBExploitMitigationThird Party Advisory
ubuntu.com/security/CVE-2025-24970REPORT
www.cve.org/CVERecord?id=CVE-2025-24970REPORT
github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24970.jsonAdvisory
nvd.nist.gov/vuln/detail/CVE-2025-24970Advisory
github.com/netty/nettyPACKAGE

Show all 11 references

security.netapp.com/advisory/ntap-20250221-0005WEB