Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-codec-haproxy

5 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.5

    Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

    Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder ( HAProxyMessageEncoder ) writes AF_UNIX source and destination socket addresses into the HAProxy V1 text protoc…

  • Medium 5.3

    HAProxyMessageDecoder Stack Exhaustion DoS

    Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…