Stack Overflow Vulnerability in Netty Framework Affects Multiple Applications

CVE-2022-41881

What is CVE-2022-41881?

The Netty Framework, an event-driven asynchronous network application framework, is susceptible to a StackOverflowError caused by the parsing of malformed messages that trigger infinite recursion. This vulnerability exists in all versions prior to 4.1.86.Final. To mitigate this issue, users are advised to upgrade to the patched version, as there are no adequate workarounds available, except for implementing a custom HaProxyMessageDecoder.

References