CVE-2026-42586
Fixed in a distro release EPSS <1%CVSS 6.8
Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEncoder) writes user-controlled string content directly to the network output buffer without validating or sanitizing CRLF (\r\n) characters. Since the Redis Serialization Protocol (RESP) uses CRLF as the command/response delimiter, an attacker who can control the content of a Redis message can inject arbitrary Redis commands or forge fake responses. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.
Products: netty, io.netty netty-codec-redis
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | io.netty:netty-codec-redis | 4.2.13.Final |
| Maven | io.netty:netty-codec-redis | 4.1.133.Final |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | apache-hop | 2.17.0-r15 |
| Chainguard | apache-hop-fips | 2.17.0-r15 |
| Chainguard | celeborn-0.5 | 0.5.4-r23 |
| Chainguard | celeborn-0.6 | 0.6.3-r3 |
| Chainguard | druid | 37.0.0-r8 |
| Chainguard | gremlin-server | 3.8.1-r2 |
| Chainguard | hadoop-3.5 | no fix |
| Chainguard | hadoop-fips-3.3.6 | no fix |
| Chainguard | hadoop-fips-3.4.2 | no fix |
| Chainguard | hadoop-fips-3.5 | 3.5.0-r3 |
| Chainguard | hadoop-fips-3.5 | no fix |
| Chainguard | management-api-for-apache-cassandra-4.0 | 0.1.117-r1 |
| Chainguard | management-api-for-apache-cassandra-4.1 | 0.1.117-r1 |
| Chainguard | management-api-for-apache-cassandra-5.0 | 0.1.117-r1 |
| Chainguard | pinot | 1.5.0-r8 |
| Chainguard | pinot-fips | 1.5.0-r10 |
| Chainguard | ranger | no fix |
| Chainguard | seata-server | 2.6.0-r9 |
| Chainguard | tez | 0.10.5-r12 |
| Chainguard | thingsboard-tb-mqtt-transport | 4.3.1.1-r9 |
| Chainguard | thingsboard-tb-node | 4.3.1.1-r9 |
| Chainguard | trino-plugin-delta-lake | 481-r0 |
| Chainguard | trino-plugin-exchange-filesystem | 481-r0 |
| Chainguard | trino-plugin-exchange-hdfs | 481-r0 |
| Chainguard | trino-plugin-hive | 481-r0 |
| Chainguard | trino-plugin-hudi | 481-r0 |
| Chainguard | trino-plugin-iceberg | 481-r0 |
| Chainguard | trino-plugin-lakehouse | 481-r0 |
| Chainguard | trino-plugin-pinot | 481-r0 |
| Debian 12 | netty | no fix |
| Debian 13 | netty | no fix |
| Debian 14 | netty | no fix |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | netty | 4.1.133-150200.4.46.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | netty-tcnative | 2.0.77-150200.3.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | netty-tcnative | 2.0.77-150200.3.39.1 |
| Ubuntu 25.10 | netty | no fix |
| Ubuntu 26.10 | netty | no fix |
| Ubuntu Pro 14.04 LTS | netty | 1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | netty | 1:4.0.34-1ubuntu0.1~esm4 |
| Ubuntu Pro 18.04 LTS | netty | 1:4.1.7-4ubuntu0.1+esm6 |
| Ubuntu Pro 20.04 LTS | netty | 1:4.1.45-1ubuntu0.1~esm6 |
| Ubuntu Pro 22.04 LTS | netty | 1:4.1.48-4+deb11u2ubuntu0.1+esm3 |
| Ubuntu Pro 24.04 LTS | netty | 1:4.1.48-9ubuntu0.1+esm3 |
| Ubuntu Pro 26.04 LTS | netty | 1:4.1.48-16ubuntu0.1~esm2 |
| Wolfi | celeborn-0.6 | 0.6.3-r3 |
| Wolfi | druid | 37.0.0-r8 |
| Wolfi | management-api-for-apache-cassandra-5.0 | 0.1.117-r1 |
| Wolfi | tez | 0.10.5-r12 |
| Wolfi | thingsboard-tb-mqtt-transport | 4.3.1.1-r9 |
| Wolfi | thingsboard-tb-node | 4.3.1.1-r9 |
| Wolfi | trino-plugin-delta-lake | 481-r0 |
| Wolfi | trino-plugin-exchange-filesystem | 481-r0 |
| Wolfi | trino-plugin-exchange-hdfs | 481-r0 |
| Wolfi | trino-plugin-hive | 481-r0 |
| Wolfi | trino-plugin-hudi | 481-r0 |
| Wolfi | trino-plugin-iceberg | 481-r0 |
| Wolfi | trino-plugin-lakehouse | 481-r0 |
| Wolfi | trino-plugin-pinot | 481-r0 |
| openSUSE Tumbleweed | netty | 4.1.133-1.1 |