CVE-2026-73508
CVE-2026-73508: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.5
High [CVE-2026-73508] Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names
CVE-2026-73508Source published Source updated
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns. DefaultDnsRecordDecoder.decodeRecord(), and io.netty.handler.codec.dns. DnsCodecUtil.decompressDomainName() failed to release retained or newly allocated ByteBuf objects when IDN.toASCII() or encodeDomainName() rejected a malformed domain name, allowing unauthenticated remote DNS packets to leak direct memory incrementally until denial of service. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. An unauthenticated remote attacker who can send DNS traffic to an application using the affected DNS resolution functionality can incrementally exhaust available memory until the process becomes…
- Affected products in this advisory
- Exploit Intelligence
- OpenShift Serverless
- Red Hat build of Apicurio Registry 3
- Red Hat build of Debezium 3
9 more entries in the full advisory.
- Source-reported affected versions
- < 4.1.136.Final
- < 4.2.16.Final
- Source-reported fixed versions
- 4.1.136
- 4.2.16
- Mitigation guidance
- Red Hat recommends upgrading to a fixed version as the primary remediation. Where an immediate upgrade is not possible, restrict network access so that only trusted DNS servers and trusted network peers can send DNS traffic to the affected application, using firewall or network policy rules to block or rate-limit DNS traffic from untrusted sources. This reduces exposure to the malformed DNS records that trigger the issue but does not fully eliminate it; upgrading remains the only complete fix.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.