CVE-2026-116540
HIGH
8,2
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
5,9
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Description
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.
416
Use After Free
StableCommon Consequences
Security Scopes Affected:
Integrity
Availability
Confidentiality
Potential Impacts:
Modify Memory
Dos: Crash, Exit, Or Restart
Read Memory
Execute Unauthorized Code Or Commands
Applicable Platforms
Languages:
Memory-Unsafe, C, C++
https://github.com/netty/netty-tcnative
https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final…
https://github.com/netty/netty-tcnative/commit/59662a8b07a9a7623ae1bc472f5751f3…
https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.…
https://github.com/netty/netty-tcnative/security/advisories/GHSA-mmc8-vg2v-fvvw
https://www.vulncheck.com/advisories/netty-tcnative-2.0.66-final-before-2.0.84-…