USN-8654-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 20 Aug 2026, 13:57
Last modified:26 Aug 2026, 22:58
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
20 Aug 2026, 13:57
Published
Vulnerability first disclosed
26 Aug 2026, 22:58
Last Modified
Vulnerability information updated
Description
netty vulnerabilities It was discovered that Netty did not properly handle malformed HTTP/2 control frames. An attacker could use this to cause a denial of service via resource exhaustion. This issue only affects Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-55163) It was discovered that Netty did not properly validate the request URI for line-break characters. An attacker could use this to perform CRLF injection and request smuggling. (CVE-2025-67735)
Affected Systems
- ubuntu•netty
< 1:4.0.34-1ubuntu0.1~esm5 | < 1:4.1.7-4ubuntu0.1+esm7 | < 1:4.1.45-1ubuntu0.1~esm7 | < 1:4.1.48-4+deb11u2ubuntu0.2 | < 1:4.1.48-9ubuntu0.2