Skip to content
fr Sign in
5.3 Medium

CVE-2023-34054 In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a…

Description

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in integration with Micrometer is enabled.

Affected products and versions

Product Affected versions Fixed in
Reactor Netty 1.1 1.1.0 → < 1.1.13 1.1.13
Reactor Netty 1.0 1.0.0 → < 1.0.39 1.0.39

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Reactor Netty

The 7 CVEs of Reactor Netty →
CVE-2026-47874 The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor… 5.3 Medium CVE-2026-47845 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is… 5.3 Medium CVE-2026-47848 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket… 6.1 Medium CVE-2026-47844 In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests 5.3 Medium
Track this CVE