CVE-2025-55163

HIGH

Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 24 (4.2.0.24)

Details

CVSS v3: 7.5
CVSS v4: 8.2
NVD published: 2025-08-13 15:15:39
EPSS: <0.1% probability · 10.7th percentile — 2026-04-08
Affected versions: cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:* cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*
Summary: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit - which results in resource exhaustion and distributed denial of service. This issue has been patched in versions 4.1.124.Final and 4.2.4.Final.
Remediation: Not available in our cache.
Exploit info: https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4

View on NVD

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.