CVE-2023-34462 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-34462 Interim 1 5 2023-09-07T23:19:43Z current 2023-06-23T23:15:55Z 2023-09-07T23:19:43Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-34462 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2023-July/015642.html E-Mail link for SUSE-SU-2023:2974-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Leap 15.4 openSUSE Leap 15.5 netty-4.1.94-150200.4.17.1 netty-javadoc-4.1.94-150200.4.17.1 netty-poms-4.1.94-150200.4.17.1 netty-tcnative netty-tcnative-2.0.61-150200.3.13.1 netty-tcnative-javadoc-2.0.61-150200.3.13.1 netty3 netty-tcnative-2.0.61-150200.3.13.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 netty-tcnative-2.0.61-150200.3.13.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 netty-4.1.94-150200.4.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 netty-javadoc-4.1.94-150200.4.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 netty-poms-4.1.94-150200.4.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 netty-tcnative-2.0.61-150200.3.13.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 netty-tcnative-2.0.61-150200.3.13.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA netty-4.1.94-150200.4.17.1 as a component of openSUSE Leap 15.4 netty-javadoc-4.1.94-150200.4.17.1 as a component of openSUSE Leap 15.4 netty-poms-4.1.94-150200.4.17.1 as a component of openSUSE Leap 15.4 netty-tcnative-2.0.61-150200.3.13.1 as a component of openSUSE Leap 15.4 netty-tcnative-javadoc-2.0.61-150200.3.13.1 as a component of openSUSE Leap 15.4 netty-4.1.94-150200.4.17.1 as a component of openSUSE Leap 15.5 netty-javadoc-4.1.94-150200.4.17.1 as a component of openSUSE Leap 15.5 netty-poms-4.1.94-150200.4.17.1 as a component of openSUSE Leap 15.5 netty-tcnative-2.0.61-150200.3.13.1 as a component of openSUSE Leap 15.5 netty-tcnative-javadoc-2.0.61-150200.3.13.1 as a component of openSUSE Leap 15.5 netty-tcnative as a component of SUSE Enterprise Storage 7 netty3 as a component of SUSE Enterprise Storage 7 netty-tcnative as a component of SUSE Enterprise Storage 7.1 netty3 as a component of SUSE Enterprise Storage 7.1 netty-tcnative as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS netty3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS netty-tcnative as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS netty3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS netty-tcnative as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS netty3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS netty-tcnative as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 netty3 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 netty-tcnative as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 netty3 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 netty-tcnative as a component of SUSE Linux Enterprise Real Time 15 SP3 netty3 as a component of SUSE Linux Enterprise Real Time 15 SP3 netty-tcnative as a component of SUSE Linux Enterprise Server 15 SP2-LTSS netty3 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS netty-tcnative as a component of SUSE Linux Enterprise Server 15 SP3-LTSS netty3 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS netty-tcnative as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 netty3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 netty-tcnative as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 netty3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final. CVE-2023-34462 SUSE Linux Enterprise Module for Development Tools 15 SP4:netty-tcnative-2.0.61-150200.3.13.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:netty-tcnative-2.0.61-150200.3.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:netty-4.1.94-150200.4.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:netty-javadoc-4.1.94-150200.4.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:netty-poms-4.1.94-150200.4.17.1 SUSE Linux Enterprise Real Time 15 SP3:netty-tcnative-2.0.61-150200.3.13.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:netty-tcnative-2.0.61-150200.3.13.1 openSUSE Leap 15.4:netty-4.1.94-150200.4.17.1 openSUSE Leap 15.4:netty-javadoc-4.1.94-150200.4.17.1 openSUSE Leap 15.4:netty-poms-4.1.94-150200.4.17.1 openSUSE Leap 15.4:netty-tcnative-2.0.61-150200.3.13.1 openSUSE Leap 15.4:netty-tcnative-javadoc-2.0.61-150200.3.13.1 openSUSE Leap 15.5:netty-4.1.94-150200.4.17.1 openSUSE Leap 15.5:netty-javadoc-4.1.94-150200.4.17.1 openSUSE Leap 15.5:netty-poms-4.1.94-150200.4.17.1 openSUSE Leap 15.5:netty-tcnative-2.0.61-150200.3.13.1 openSUSE Leap 15.5:netty-tcnative-javadoc-2.0.61-150200.3.13.1 SUSE Enterprise Storage 7.1:netty-tcnative SUSE Enterprise Storage 7.1:netty3 SUSE Enterprise Storage 7:netty-tcnative SUSE Enterprise Storage 7:netty3 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:netty-tcnative SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:netty3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:netty-tcnative SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:netty3 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:netty-tcnative SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:netty3 SUSE Linux Enterprise Module for Development Tools 15 SP4:netty-tcnative SUSE Linux Enterprise Module for Development Tools 15 SP4:netty3 SUSE Linux Enterprise Module for Development Tools 15 SP5:netty-tcnative SUSE Linux Enterprise Module for Development Tools 15 SP5:netty3 SUSE Linux Enterprise Real Time 15 SP3:netty-tcnative SUSE Linux Enterprise Real Time 15 SP3:netty3 SUSE Linux Enterprise Server 15 SP2-LTSS:netty-tcnative SUSE Linux Enterprise Server 15 SP2-LTSS:netty3 SUSE Linux Enterprise Server 15 SP3-LTSS:netty-tcnative SUSE Linux Enterprise Server 15 SP3-LTSS:netty3 SUSE Linux Enterprise Server for SAP Applications 15 SP2:netty-tcnative SUSE Linux Enterprise Server for SAP Applications 15 SP2:netty3 SUSE Linux Enterprise Server for SAP Applications 15 SP3:netty-tcnative SUSE Linux Enterprise Server for SAP Applications 15 SP3:netty3 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H