CVE-2022-41881

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder.

• CWE-674
• CWE-674

• https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985vExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00008.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230113-0004/Third Party Advisory
• https://www.debian.org/security/2023/dsa-5316Third Party Advisory
• https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985vExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00008.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230113-0004/Third Party Advisory
• https://www.debian.org/security/2023/dsa-5316Third Party Advisory

Published

Dec 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41876ezplatform-graphql is a GraphQL server implementation for Ib…5.3
• CVE-2022-41877FreeRDP is a free remote desktop protocol library and client…4.6
• CVE-2022-41878Parse Server is an open source backend that can be deployed …9.8
• CVE-2022-41879Parse Server is an open source backend that can be deployed …9.8
• CVE-2022-4188Insufficient validation of untrusted input in CORS in Google…4.3
• CVE-2022-41880TensorFlow is an open source platform for machine learning. …9.1
• CVE-2022-41882The Nextcloud Desktop Client is a tool to synchronize files …7.8
• CVE-2022-41883TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-41884TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-41885TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-41886TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-41887TensorFlow is an open source platform for machine learning. …7.5