CVE-2025-55163

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit - which results in resource exhaustion and distributed denial of service. This issue has been patched in versions 4.1.124.Final and 4.2.4.Final.

• CWE-770

• https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4Exploit, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2025/08/16/1
• https://www.kb.cert.org/vuls/id/767506

Published

Aug 13, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55158Vim is an open source, command line text editor. In versions…8.8
• CVE-2025-55159slab is a pre-allocated storage for a uniform data type. In …5.1
• CVE-2025-5516A vulnerability, which was classified as problematic, was fo…4.8
• CVE-2025-55160ImageMagick is free and open-source software used for editin…5.3
• CVE-2025-55161Stirling-PDF is a locally hosted web application that perfor…9.8
• CVE-2025-55162Envoy is an open source L7 proxy and communication bus desig…8.8
• CVE-2025-55164content-security-policy-parser parses content security polic…8.8
• CVE-2025-55165Autocaliweb is a web app that offers an interface for browsi…8.2
• CVE-2025-55166savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version …5.1
• CVE-2025-55167WeGIA is an open source web manager with a focus on the Port…9.8
• CVE-2025-55168WeGIA is an open source web manager with a focus on the Port…9.8
• CVE-2025-55169WeGIA is an open source web manager with a focus on the Port…6.5