High severity8.7NVD Advisory· Published Jun 12, 2026· Updated Sep 4, 2026
CVE-2026-45674
CVE-2026-45674
Description
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
174- osv-coords172 versionspkg:apk/chainguard/elasticsearch-9.3-iamguardedpkg:apk/chainguard/wildfly-openjdk-17pkg:apk/chainguard/apicurio-registrypkg:apk/chainguard/elasticsearch-fips-9.4pkg:apk/chainguard/hono-clipkg:apk/chainguard/infinispan-15.1pkg:apk/chainguard/request-9047-keycloak-fips-26.5-operatorpkg:apk/chainguard/request-9047-keycloak-fips-26.6-iamguarded-fipspkg:apk/chainguard/zipkinpkg:apk/wolfi/akhqpkg:apk/wolfi/trino-plugin-exchange-filesystempkg:apk/chainguard/camunda-8.8pkg:apk/chainguard/elasticsearch-9.3pkg:apk/chainguard/infinispan-15.0pkg:apk/chainguard/knative-kafka-broker-fips-1.21-receiver-loompkg:apk/chainguard/trino-plugin-spooling-filesystempkg:apk/wolfi/apache-pulsar-4.1pkg:apk/wolfi/druidpkg:apk/wolfi/infinispan-16.1pkg:apk/wolfi/keycloak-26.6-iamguarded-compatpkg:apk/wolfi/trino-plugin-exchange-hdfspkg:apk/wolfi/trino-plugin-icebergpkg:apk/wolfi/trino-plugin-lakehousepkg:apk/wolfi/infinispan-15.2pkg:apk/chainguard/airbyte-server-fipspkg:apk/chainguard/kayenta-2026.1pkg:apk/chainguard/gremlin-serverpkg:apk/chainguard/strimzi-kafka-operator-fips-cluster-operatorpkg:apk/chainguard/apache-pulsar-fips-4.0pkg:apk/chainguard/camunda-8.9pkg:apk/chainguard/druidpkg:apk/chainguard/elasticsearch-8.19pkg:apk/chainguard/sonarqubepkg:apk/wolfi/keycloak-26.6pkg:apk/wolfi/keycloak-26.6-operatorpkg:apk/wolfi/opensearch-3-repository-azurepkg:apk/wolfi/selenium-serverpkg:apk/wolfi/sonarqubepkg:apk/wolfi/spark-4.0-scala-2.13pkg:apk/wolfi/spark-4.1-scala-2.13pkg:apk/wolfi/strimzi-kafka-operator-kafka-initpkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-ccpkg:apk/wolfi/strimzi-kafka-operator-topic-operatorpkg:apk/wolfi/strimzi-kafka-operator-tracing-agentpkg:apk/wolfi/management-api-for-apache-cassandra-5.0pkg:rpm/opensuse/netty&distro=openSUSE%20Tumbleweedpkg:apk/chainguard/elasticsearch-9.2-iamguardedpkg:apk/chainguard/elasticsearch-9.3-iamguarded-fipspkg:apk/chainguard/hono-service-device-registry-jdbcpkg:apk/chainguard/request-9047-keycloak-fips-26.6-operatorpkg:apk/wolfi/strimzi-kafka-operator-cluster-operatorpkg:apk/chainguard/elasticsearch-8.19-iamguardedpkg:apk/chainguard/elasticsearch-fips-9.3pkg:apk/chainguard/hono-adapter-mqttpkg:apk/chainguard/knative-kafka-broker-fips-1.21-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-fips-1.22-dispatcher-loompkg:apk/chainguard/request-9047-keycloak-fips-26.4pkg:apk/chainguard/request-9047-keycloak-fips-26.4-iamguarded-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.4-operatorpkg:apk/chainguard/request-9047-keycloak-fips-26.5pkg:apk/chainguard/request-9047-keycloak-fips-26.5-iamguarded-fipspkg:apk/chainguard/s3proxypkg:apk/chainguard/s3proxy-fipspkg:apk/chainguard/spark-4.0-scala-2.13pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-thirdparty-libs-ccpkg:apk/chainguard/strimzi-kafka-operator-fips-topic-operatorpkg:apk/chainguard/thingsboard-tb-mqtt-transportpkg:apk/chainguard/trino-plugin-icebergpkg:apk/chainguard/trino-plugin-pinotpkg:apk/chainguard/wildfly-openjdk-21pkg:apk/chainguard/zipkin-slimpkg:apk/wolfi/apache-nifipkg:apk/wolfi/apicurio-registrypkg:apk/wolfi/flywaypkg:apk/wolfi/strimzi-kafka-operator-user-operatorpkg:apk/wolfi/tezpkg:apk/wolfi/thingsboard-tb-nodepkg:apk/wolfi/trino-plugin-delta-lakepkg:apk/wolfi/trino-plugin-hivepkg:apk/wolfi/trino-plugin-pinotpkg:apk/wolfi/trino-plugin-spooling-filesystempkg:apk/chainguard/airbyte-serverpkg:apk/chainguard/akhqpkg:apk/chainguard/apache-hoppkg:apk/chainguard/apache-hop-fipspkg:apk/chainguard/apache-nifipkg:apk/chainguard/apache-pulsar-4.0pkg:apk/chainguard/apache-pulsar-4.1pkg:apk/chainguard/apache-pulsar-4.2pkg:apk/chainguard/camunda-zeebe-8.6pkg:apk/chainguard/camunda-zeebe-8.7pkg:apk/chainguard/camunda-zeebe-8.8pkg:apk/chainguard/camunda-zeebe-8.9pkg:apk/chainguard/commercial-elasticsearch-9.3pkg:apk/chainguard/commercial-elasticsearch-9.4pkg:apk/chainguard/elasticsearch-9.4-iamguardedpkg:apk/chainguard/elasticsearch-9.4-iamguarded-fipspkg:apk/chainguard/elasticsearch-fips-8.19pkg:apk/chainguard/flywaypkg:apk/chainguard/flyway-fipspkg:apk/chainguard/hono-service-authpkg:apk/chainguard/hono-service-command-routerpkg:apk/chainguard/infinispan-16.1pkg:apk/chainguard/kafbat-uipkg:apk/chainguard/kafbat-ui-fipspkg:apk/chainguard/kafka-bridgepkg:apk/chainguard/kafka-bridge-fipspkg:apk/chainguard/kayenta-2025.4pkg:apk/chainguard/kayenta-2026.0pkg:apk/chainguard/kayenta-fips-2025.4pkg:apk/chainguard/kayenta-fips-2026.0pkg:apk/chainguard/kayenta-fips-2026.1pkg:apk/chainguard/keycloak-26.6pkg:apk/chainguard/keycloak-26.6-iamguarded-compatpkg:apk/chainguard/keycloak-26.6-operatorpkg:apk/chainguard/keycloak-fips-26.6pkg:apk/chainguard/keycloak-fips-26.6-iamguarded-fipspkg:apk/chainguard/keycloak-fips-26.6-operatorpkg:apk/chainguard/knative-kafka-broker-1.20-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-1.20-receiver-loompkg:apk/chainguard/knative-kafka-broker-1.21-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-1.21-receiver-loompkg:apk/chainguard/knative-kafka-broker-1.22-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-1.22-receiver-loompkg:apk/chainguard/knative-kafka-broker-fips-1.20-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-fips-1.20-receiver-loompkg:apk/chainguard/knative-kafka-broker-fips-1.22-receiver-loompkg:apk/chainguard/management-api-for-apache-cassandra-4.0pkg:apk/chainguard/management-api-for-apache-cassandra-4.1pkg:apk/chainguard/management-api-for-apache-cassandra-5.0pkg:apk/chainguard/opensearch-2-repository-azurepkg:apk/chainguard/opensearch-3-repository-azurepkg:apk/chainguard/opensearch-fips-3-repository-azurepkg:apk/chainguard/spark-4.1-scala-2.13pkg:apk/chainguard/spark-fips-4.1-scala-2.13pkg:apk/chainguard/spark-kubernetes-operatorpkg:apk/chainguard/spark-kubernetes-operator-fipspkg:apk/chainguard/strimzi-kafka-operator-cluster-operatorpkg:apk/chainguard/strimzi-kafka-operator-fips-tracing-agentpkg:apk/chainguard/strimzi-kafka-operator-fips-user-operatorpkg:apk/chainguard/strimzi-kafka-operator-kafka-agentpkg:apk/chainguard/strimzi-kafka-operator-kafka-initpkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-ccpkg:apk/chainguard/strimzi-kafka-operator-topic-operatorpkg:apk/chainguard/strimzi-kafka-operator-tracing-agentpkg:apk/chainguard/strimzi-kafka-operator-user-operatorpkg:apk/chainguard/tezpkg:apk/chainguard/thingsboard-tb-nodepkg:apk/chainguard/trino-plugin-delta-lakepkg:apk/chainguard/trino-plugin-exchange-filesystempkg:apk/chainguard/trino-plugin-exchange-hdfspkg:apk/chainguard/trino-plugin-hivepkg:apk/chainguard/trino-plugin-hudipkg:apk/wolfi/wildfly-openjdk-17pkg:apk/wolfi/wildfly-openjdk-21pkg:apk/wolfi/zipkinpkg:apk/wolfi/zipkin-slimpkg:apk/chainguard/pinotpkg:apk/chainguard/pinot-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.6pkg:apk/chainguard/seata-serverpkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-agentpkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-initpkg:apk/chainguard/trino-plugin-lakehousepkg:apk/wolfi/strimzi-kafka-operator-kafka-agentpkg:apk/wolfi/thingsboard-tb-mqtt-transportpkg:apk/chainguard/commercial-elasticsearch-8.19pkg:apk/chainguard/elasticsearch-9.4pkg:apk/chainguard/infinispan-15.2pkg:apk/chainguard/selenium-serverpkg:apk/wolfi/apache-pulsar-4.2pkg:apk/wolfi/trino-plugin-hudi
< 9.3.7-r1+ 171 more
- (no CPE)range: < 9.3.7-r1
- (no CPE)range: < 40.0.0-r3
- (no CPE)range: < 3.3.0-r3
- (no CPE)range: < 9.4.2-r3
- (no CPE)range: < 2.7.0-r22
- (no CPE)range: < 15.1.7-r20
- (no CPE)range: < 26.5.7-r6
- (no CPE)range: < 26.6.3-r2
- (no CPE)range: < 3.6.1-r10
- (no CPE)range: < 0.27.1-r3
- (no CPE)range: < 481-r7
- (no CPE)range: < 8.8.27-r1
- (no CPE)range: < 9.3.7-r1
- (no CPE)range: < 15.0.22-r11
- (no CPE)range: < 1.21.3-r10
- (no CPE)range: < 481-r7
- (no CPE)range: < 4.1.3-r15
- (no CPE)range: < 37.0.0-r12
- (no CPE)range: < 16.1.4-r3
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 15.2.6-r19
- (no CPE)range: < 2.0.0-r1
- (no CPE)range: < 2026.1.1-r1
- (no CPE)range: < 3.8.1-r2
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 4.0.11-r2
- (no CPE)range: < 8.9.6-r1
- (no CPE)range: < 37.0.0-r12
- (no CPE)range: < 8.19.16-r1
- (no CPE)range: < 26.8.0.126808-r0
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 3.6.0-r7
- (no CPE)range: < 4.44.0-r2
- (no CPE)range: < 26.8.0.126808-r0
- (no CPE)range: < 4.0.3-r1
- (no CPE)range: < 4.1.2-r4
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r7
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 0.1.120-r0
- (no CPE)range: < 4.1.135-1.1
- (no CPE)range: < 9.2.8-r13
- (no CPE)range: < 9.3.7-r1
- (no CPE)range: < 2.7.0-r22
- (no CPE)range: < 26.6.3-r2
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 8.19.16-r1
- (no CPE)range: < 9.3.7-r1
- (no CPE)range: < 2.7.0-r22
- (no CPE)range: < 1.21.3-r10
- (no CPE)range: < 1.22.1-r4
- (no CPE)range: < 26.4.7-r17
- (no CPE)range: < 26.4.7-r17
- (no CPE)range: < 26.4.7-r17
- (no CPE)range: < 26.5.7-r6
- (no CPE)range: < 26.5.7-r6
- (no CPE)range: < 3.1.0-r9
- (no CPE)range: < 3.1.0-r8
- (no CPE)range: < 4.0.3-r1
- (no CPE)range: < 1.0.0-r2
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 4.3.1.2-r5
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 40.0.0-r3
- (no CPE)range: < 3.6.1-r10
- (no CPE)range: < 2.9.0-r14
- (no CPE)range: < 3.3.0-r3
- (no CPE)range: < 12.8.1-r4
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 0.10.5-r16
- (no CPE)range: < 4.3.1.2-r5
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 2.0.0-r1
- (no CPE)range: < 0.27.1-r3
- (no CPE)range: < 2.18.0-r4
- (no CPE)range: < 2.18.0-r4
- (no CPE)range: < 2.9.0-r14
- (no CPE)range: < 4.0.11-r0
- (no CPE)range: < 4.1.3-r15
- (no CPE)range: < 4.2.2-r3
- (no CPE)range: < 8.6.39-r6
- (no CPE)range: < 8.7.30-r1
- (no CPE)range: < 8.8.26-r0
- (no CPE)range: < 8.9.6-r1
- (no CPE)range: < 9.3.6-r0
- (no CPE)range: < 9.4.3-r0
- (no CPE)range: < 9.4.2-r2
- (no CPE)range: < 9.4.2-r3
- (no CPE)range: < 8.19.16-r1
- (no CPE)range: < 12.8.1-r4
- (no CPE)range: < 12.8.1-r2
- (no CPE)range: < 2.7.0-r22
- (no CPE)range: < 2.7.0-r22
- (no CPE)range: < 16.1.4-r3
- (no CPE)range: < 1.5.0-r1
- (no CPE)range: < 1.5.0-r6
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 2025.4.6-r1
- (no CPE)range: < 2026.0.4-r1
- (no CPE)range: < 2025.4.3-r10
- (no CPE)range: < 2026.0.4-r1
- (no CPE)range: < 2026.1.1-r1
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 26.6.3-r3
- (no CPE)range: < 26.6.3-r2
- (no CPE)range: < 26.6.3-r2
- (no CPE)range: < 1.20.3-r6
- (no CPE)range: < 1.20.3-r6
- (no CPE)range: < 1.21.4-r4
- (no CPE)range: < 1.21.4-r4
- (no CPE)range: < 1.22.1-r4
- (no CPE)range: < 1.22.1-r4
- (no CPE)range: < 1.20.3-r6
- (no CPE)range: < 1.20.3-r6
- (no CPE)range: < 1.22.1-r4
- (no CPE)range: < 0.1.117-r3
- (no CPE)range: < 0.1.117-r2
- (no CPE)range: < 0.1.120-r0
- (no CPE)range: < 2.19.5-r1
- (no CPE)range: < 3.6.0-r7
- (no CPE)range: < 3.7.0-r0
- (no CPE)range: < 4.1.2-r4
- (no CPE)range: < 4.1.2-r3
- (no CPE)range: < 0.9.0-r1
- (no CPE)range: < 0.9.0-r1
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r7
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 0.10.5-r16
- (no CPE)range: < 4.3.1.2-r5
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 481-r7
- (no CPE)range: < 40.0.0-r3
- (no CPE)range: < 40.0.0-r3
- (no CPE)range: < 3.6.1-r10
- (no CPE)range: < 3.6.1-r10
- (no CPE)range: < 1.5.0-r16
- (no CPE)range: < 1.5.0-r11
- (no CPE)range: < 26.6.3-r2
- (no CPE)range: < 2.6.0-r13
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 1.0.0-r3
- (no CPE)range: < 481-r7
- (no CPE)range: < 1.0.0-r6
- (no CPE)range: < 4.3.1.2-r5
- (no CPE)range: < 8.19.17-r0
- (no CPE)range: < 9.4.2-r2
- (no CPE)range: < 15.2.6-r19
- (no CPE)range: < 4.44.0-r2
- (no CPE)range: < 4.2.2-r3
- (no CPE)range: < 481-r7
Patches
Vulnerability mechanics
References
22- github.com/advisories/GHSA-676x-f7gg-47vcghsaADVISORY
- github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vcnvdVendor Advisory
- github.com/netty/netty/releases/tag/netty-4.1.135.FinalnvdRelease Notes
- github.com/netty/netty/releases/tag/netty-4.2.15.FinalnvdRelease Notes
- access.redhat.com/errata/RHSA-2026:26017nvd
- access.redhat.com/errata/RHSA-2026:26018nvd
- access.redhat.com/errata/RHSA-2026:26586nvd
- access.redhat.com/errata/RHSA-2026:34608nvd
- access.redhat.com/errata/RHSA-2026:37390nvd
- access.redhat.com/errata/RHSA-2026:41951nvd
- access.redhat.com/errata/RHSA-2026:48151nvd
- access.redhat.com/errata/RHSA-2026:49700nvd
- access.redhat.com/errata/RHSA-2026:49701nvd
- access.redhat.com/errata/RHSA-2026:50085nvd
- access.redhat.com/errata/RHSA-2026:53644nvd
- access.redhat.com/errata/RHSA-2026:53806nvd
- access.redhat.com/errata/RHSA-2026:54435nvd
- access.redhat.com/errata/RHSA-2026:62260nvd
- access.redhat.com/security/cve/CVE-2026-45674nvd
- bugzilla.redhat.com/show_bug.cginvd
- nvd.nist.gov/vuln/detail/CVE-2026-45674ghsa
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45674.jsonnvd
News mentions
1- Netty: 12 Vulnerabilities Disclosed Together, Many High-Severity DoSVypr Intelligence · Jun 8, 2026