Detections
Analytics
SCA: security update for io.netty:netty-common (GHSA-389x-839f-4rhx)
medium Tenable Cloud Security Plugin ID 420909
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to
and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of
service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not
exist. If an attacker creates such a large file, the Netty application crash. A similar issue was
previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes
were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an
updated fix. (CVE-2025-25193)
See Also
Plugin Details
Severity: Medium
ID: 420909
Version: Revision 1.9
Type: Local
Family: SCA Checks
Published: 2/14/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.69
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2025-25193
CVSS v3
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 2/10/2025
Vulnerability Publication Date: 2/10/2025
Reference Information
CVE: CVE-2025-25193
cwe: CWE-400