netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

zetlyn/cve-redhat vulnerability cve CVE-2026-48043 known 2026-06-12

https://access.redhat.com/security/cve/CVE-2026-48043

Properties

cvss7.5
receipt
Source
Red Hat
Its words
7.5
Read by
field:cvss3_score
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-48043",
  "CWE": "CWE-772",
  "advisories": [
    "RHSA-2026:54435",
    "RHSA-2026:26586",
    "RHSA-2026:48151",
    "RHSA-2026:48124",
    "RHSA-2026:50085",
    "RHSA-2026:34608",
    "RHSA-2026:36820",
    "RHSA-2026:53646",
    "RHSA-2026:53644",
    "RHSA-2026:53645",
    "RHSA-2026:66488",
    "RHSA-2026:65126",
    "RHSA-2026:53806",
    "RHSA-2026:37390",
    "RHSA-2026:26018",
    "RHSA-2026:26017",
    "RHSA-2026:41951"
  ],
  "affected_packages": [
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "rhoai/odh-trustyai-service-rhel9:1788198681",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el9eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el8eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/pluginregistry-rhel9:1782989367",
    "io.netty/netty-codec-http2:4.1.135.Final-redhat-00001",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el9eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/jetbrains-ide-rhel9:1784830552",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el9eap",
    "devspaces/openvsx-rhel9:1783007534",
    "cryostat/cryostat-rhel9:4.2.0-13",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el8eap",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap",
    "netty-codec-http2",
    "devspaces/server-rhel9:1783033397",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap",
    "cryostat/jfr-datasource-rhel9:4.2.0-13",
    "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap",
    "devspaces/multicluster-redirector-rhel9:1782989027",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el8eap",
    "cryostat/cryostat-reports-rhel9:4.2.0-13",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el8eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el9eap"
  ],
  "bugzilla": "2488442",
  "bugzilla_description": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
  "cvss3_score": "7.5",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-06-12T14:39:52Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-48043.json",
  "severity": "important"
}
cweCWE-772
receipt
Source
Red Hat
Its words
CWE-772
Read by
field:CWE
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-48043",
  "CWE": "CWE-772",
  "advisories": [
    "RHSA-2026:54435",
    "RHSA-2026:26586",
    "RHSA-2026:48151",
    "RHSA-2026:48124",
    "RHSA-2026:50085",
    "RHSA-2026:34608",
    "RHSA-2026:36820",
    "RHSA-2026:53646",
    "RHSA-2026:53644",
    "RHSA-2026:53645",
    "RHSA-2026:66488",
    "RHSA-2026:65126",
    "RHSA-2026:53806",
    "RHSA-2026:37390",
    "RHSA-2026:26018",
    "RHSA-2026:26017",
    "RHSA-2026:41951"
  ],
  "affected_packages": [
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "rhoai/odh-trustyai-service-rhel9:1788198681",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el9eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el8eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/pluginregistry-rhel9:1782989367",
    "io.netty/netty-codec-http2:4.1.135.Final-redhat-00001",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el9eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/jetbrains-ide-rhel9:1784830552",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el9eap",
    "devspaces/openvsx-rhel9:1783007534",
    "cryostat/cryostat-rhel9:4.2.0-13",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el8eap",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap",
    "netty-codec-http2",
    "devspaces/server-rhel9:1783033397",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap",
    "cryostat/jfr-datasource-rhel9:4.2.0-13",
    "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap",
    "devspaces/multicluster-redirector-rhel9:1782989027",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el8eap",
    "cryostat/cryostat-reports-rhel9:4.2.0-13",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el8eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el9eap"
  ],
  "bugzilla": "2488442",
  "bugzilla_description": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
  "cvss3_score": "7.5",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-06-12T14:39:52Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-48043.json",
  "severity": "important"
}
packageseap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el9eap, eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap, eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el9eap, eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap, rhoai/odh-trustyai-service-rhel9:1788198681, eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el9eap, eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el8eap, eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap, eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el8eap, eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el8eap, eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el9eap, devspaces/pluginregistry-rhel9:1782989367, io.netty/netty-codec-http2:4.1.135.Final-redhat-00001, eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el9eap, eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el9eap, devspaces/jetbrains-ide-rhel9:1784830552, eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap, eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el8eap, eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el9eap, devspaces/openvsx-rhel9:1783007534, cryostat/cryostat-rhel9:4.2.0-13, eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el8eap, eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap, eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el9eap, eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el8eap, eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap, eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el8eap, eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el9eap, eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap, eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el8eap, eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap, eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap, eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el8eap, eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap, eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el9eap, eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap, eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap, eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap, eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el9eap, eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el8eap, eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap, eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap, eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el8eap, eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap, netty-codec-http2, devspaces/server-rhel9:1783033397, eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap, cryostat/jfr-datasource-rhel9:4.2.0-13, eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap, devspaces/multicluster-redirector-rhel9:1782989027, eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el8eap, cryostat/cryostat-reports-rhel9:4.2.0-13, eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el8eap, eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap, eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap, eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap, eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el9eap, eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el8eap, eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el8eap, eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el9eap, eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el9eap, eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el9eap
receipt
Source
Red Hat
Its words
eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el9eap, eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap, eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el9eap, eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap, rhoai/odh-trustyai-service-rhel9:1788198681, eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el9eap, eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el8eap, eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap, eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el8eap, eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el8eap, eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el9eap, devspaces/pluginregistry-rhel9:1782989367, io.netty/netty-codec-http2:4.1.135.Final-redhat-00001, eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el9eap, eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el9eap, devspaces/jetbrains-ide-rhel9:1784830552, eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap, eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el8eap, eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el9eap, devspaces/openvsx-rhel9:1783007534, cryostat/cryostat-rhel9:4.2.0-13, eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el8eap, eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap, eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el9eap, eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el8eap, eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap, eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el8eap, eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el9eap, eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap, eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el8eap, eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap, eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap, eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el8eap, eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap, eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el9eap, eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap, eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap, eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap, eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el9eap, eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el8eap, eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap, eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap, eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el8eap, eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap, netty-codec-http2, devspaces/server-rhel9:1783033397, eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap, cryostat/jfr-datasource-rhel9:4.2.0-13, eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap, devspaces/multicluster-redirector-rhel9:1782989027, eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el8eap, cryostat/cryostat-reports-rhel9:4.2.0-13, eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el8eap, eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap, eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap, eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap, eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el9eap, eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el8eap, eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el8eap, eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el9eap, eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el9eap, eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el9eap
Read by
field:affected_packages[]
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-48043",
  "CWE": "CWE-772",
  "advisories": [
    "RHSA-2026:54435",
    "RHSA-2026:26586",
    "RHSA-2026:48151",
    "RHSA-2026:48124",
    "RHSA-2026:50085",
    "RHSA-2026:34608",
    "RHSA-2026:36820",
    "RHSA-2026:53646",
    "RHSA-2026:53644",
    "RHSA-2026:53645",
    "RHSA-2026:66488",
    "RHSA-2026:65126",
    "RHSA-2026:53806",
    "RHSA-2026:37390",
    "RHSA-2026:26018",
    "RHSA-2026:26017",
    "RHSA-2026:41951"
  ],
  "affected_packages": [
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "rhoai/odh-trustyai-service-rhel9:1788198681",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el9eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el8eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/pluginregistry-rhel9:1782989367",
    "io.netty/netty-codec-http2:4.1.135.Final-redhat-00001",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el9eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/jetbrains-ide-rhel9:1784830552",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el9eap",
    "devspaces/openvsx-rhel9:1783007534",
    "cryostat/cryostat-rhel9:4.2.0-13",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el8eap",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap",
    "netty-codec-http2",
    "devspaces/server-rhel9:1783033397",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap",
    "cryostat/jfr-datasource-rhel9:4.2.0-13",
    "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap",
    "devspaces/multicluster-redirector-rhel9:1782989027",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el8eap",
    "cryostat/cryostat-reports-rhel9:4.2.0-13",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el8eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el9eap"
  ],
  "bugzilla": "2488442",
  "bugzilla_description": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
  "cvss3_score": "7.5",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-06-12T14:39:52Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-48043.json",
  "severity": "important"
}
severityimportant
A flaw that can easily compromise confidentiality, integrity or availability.
receipt
Source
Red Hat
Its words
important
Read by
field:severity
Said since
2026-09-29 09:44 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
What the source handed over
{
  "CVE": "CVE-2026-48043",
  "CWE": "CWE-772",
  "advisories": [
    "RHSA-2026:54435",
    "RHSA-2026:26586",
    "RHSA-2026:48151",
    "RHSA-2026:48124",
    "RHSA-2026:50085",
    "RHSA-2026:34608",
    "RHSA-2026:36820",
    "RHSA-2026:53646",
    "RHSA-2026:53644",
    "RHSA-2026:53645",
    "RHSA-2026:66488",
    "RHSA-2026:65126",
    "RHSA-2026:53806",
    "RHSA-2026:37390",
    "RHSA-2026:26018",
    "RHSA-2026:26017",
    "RHSA-2026:41951"
  ],
  "affected_packages": [
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el9eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "rhoai/odh-trustyai-service-rhel9:1788198681",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el9eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el8eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/pluginregistry-rhel9:1782989367",
    "io.netty/netty-codec-http2:4.1.135.Final-redhat-00001",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el9eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el9eap",
    "devspaces/jetbrains-ide-rhel9:1784830552",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el9eap",
    "devspaces/openvsx-rhel9:1783007534",
    "cryostat/cryostat-rhel9:4.2.0-13",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el8eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el8eap",
    "eap7-undertow-0:2.2.40-1.SP3_redhat_00001.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el8eap",
    "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el9eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el9eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap",
    "netty-codec-http2",
    "devspaces/server-rhel9:1783033397",
    "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap",
    "cryostat/jfr-datasource-rhel9:4.2.0-13",
    "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap",
    "devspaces/multicluster-redirector-rhel9:1782989027",
    "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el8eap",
    "cryostat/cryostat-reports-rhel9:4.2.0-13",
    "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el8eap",
    "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap",
    "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap",
    "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap",
    "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el9eap",
    "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el8eap",
    "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el8eap",
    "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el9eap",
    "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el9eap"
  ],
  "bugzilla": "2488442",
  "bugzilla_description": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
  "cvss3_score": "7.5",
  "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-06-12T14:39:52Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-48043.json",
  "severity": "important"
}

Text

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak