Most recent entries from all

bdu:2022-00333

certfr-2022-avi-113 — De multiples vulnérabilités ont été découvertes dans les produits NetApp. Elles permettent à un attaquant de provoquer…

certfr-2022-avi-113

EUVD-2026-246278

fkie_cve-2019-20444

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

GHSA-cqqj-4p63-rrmm — HTTP Request Smuggling in Netty

Affected: Maven: io.netty:netty-codec-http, Maven: org.jboss.netty:netty, Maven: io.netty:netty

gsd-2019-20444

OESA-2024-2066 — netty3 security update

Affected: openEuler:20.03-LTS-SP4: netty3

Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server. Security Fix(es): Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.(CVE-2019-16869) HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."(CVE-2019-20444) HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.(CVE-2019-20445)

RHSA-2020:0497 — Red Hat Security Advisory: AMQ Online security update

netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

UBUNTU-CVE-2019-20444

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:16.04:LTS: netty-3.9, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:18.04:LTS: netty, Ubuntu:18.04:LTS: netty-3.9

WID-SEC-W-2022-2133 — JFrog Artifactory: Mehrere Schwachstellen in Drittanbieter-Komponenten

JFrog Artifactory nutzt verschiedene Komponenten von Drittanbietern. Diese enthalten mehrere Schwachstellen. Neuen Informationen von JFrog zufolge sind diese Schwachstellen jedoch nicht in Produkten von JFrog ausnutzbar.