CVE:CVE-2020-11612
CNNVD:CNNVD-202004-377
Netty是Netty社区的一款非阻塞I/O客户端-服务器框架，它主要用于开发Java网络应用程序，如协议服务器和客户端等。
Netty 4.1.46之前的4.1.x版本中的ZlibDecoders存在资源管理错误漏洞，该漏洞源于程序在解码ZlibEncoded字节流时没有限制内存分配。攻击者可通过发送大量ZlibEncoded字节流到Netty服务器利用该漏洞占用资源，导致拒绝服务。
solution:Upgrade netty netty to a higher version than 4.1.46,and avoid the version [4.1,4.1.46); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade oracle communications_brm_-_elastic_charging_engine to a higher version than 12.0.0.3,and avoid the version 12.0.0.3; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.5.2,and avoid the version 1.5.2; Upgrade oracle communications_design_studio to a higher version than 7.4.2,and avoid the version 7.4.2; Upgrade oracle nosql_database to a higher version than 20.3,and avoid the version (,20.3); Upgrade oracle siebel_core_-_server_framework to a higher version than 21.5,and avoid the version (,21.5); Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1