Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | netty | 1:4.1.33-1+deb10u1 |
| Debian · 9 | netty | 1:4.1.7-2+deb9u1 |
Vulnerabilities 1
-
High 7.5
HTTP Request Smuggling in Netty
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.