CVE:CVE-2021-37137
CNNVD:CNNVD-202110-1441
Netty是Netty社区的一款非阻塞I/O客户端-服务器框架，它主要用于开发Java网络应用程序，如协议服务器和客户端等。
Netty 存在资源管理错误漏洞，该漏洞源于Snappy frame decoder函数不限制块长度，这可能会导致过度内存使用。
solution:Upgrade netty netty to a higher version than 4.1.68,and avoid the version (,4.1.68); Upgrade oracle banking_apis to a higher version than 18.3,19.1,19.2,20.1,21.1,and avoid the version [18.1,18.3],19.1,19.2,20.1,21.1; Upgrade oracle banking_digital_experience to a higher version than 18.1,18.2,18.3,19.1,19.2,20.1,21.1,and avoid the version 18.1,18.2,18.3,19.1,19.2,20.1,21.1; Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_brm_-_elastic_charging_engine to a higher version than 12.0.0.4.6,12.0.0.5.0,and avoid the version (,12.0.0.4.6),12.0.0.5.0; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0.2,and avoid the version [8.0.0.0,8.5.0.2]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade quarkus quarkus to a higher version than 2.2.4,and avoid the version (,2.2.4); Upgrade netapp oncommand_insight to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0