Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-handler

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-34462

    netty-handler SniHandler 16MB allocation

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler…

    netty netty netty netty Debian Ubuntu Wolfi Maven
  • Medium —
    CVE-2019-20445 EPSS 14%

    HTTP Request Smuggling in Netty

    HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

    druid netty netty io.netty:netty-handler Debian Ubuntu Wolfi Maven
  • Medium —
    CVE-2014-3488

    Denial of service in Netty

    The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

    io.netty:netty-handler Maven