Red HatCVE-2026-93561
A flaw was found in io.netty/netty-codec-memcache
Medium6.5CVE-2026-93561 · Published Sep 18, 2026 · updated Sep 25, 2026
A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted response. This can lead to frame desynchronization and response smuggling, where one client's data may be inadvertently exposed to another client's response stream in proxy or cache environments.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Red Hat Fuse 7 Product | all versions | No fix yet |
| Red Hat JBoss Enterprise Application Platform 7 Product | all versions | No fix yet |
| all versions | No fix yet | |
| all versions | No fix yet | |
| all versions | No fix yet | |
| Red Hat Single Sign-On 7 Product | all versions | No fix yet |
| Red Hat build of Apache Camel for Spring Boot 4 Product | all versions | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-1035
More Red Hat advisories
All Red Hat| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 18 | Red Hat OpenShift Container Platform 4: server-side request forgery | Critical9.3 | No fix yet |
| Sep 18 | Red Hat Netty: request smuggling | Medium6.5 | No fix yet |
| Sep 18 | Red Hat Netty: request smuggling | Medium6.5 | No fix yet |
| Sep 18 | A flaw was found in cockpit-files | Medium6.1 | No fix yet |
| Sep 18 | Red Hat cockpit-files. This vulnerability: race condition | Medium6.0 | No fix yet |
| Sep 18 | Red Hat cockpit-files: race condition | Medium6.0 | No fix yet |