Skip to content
OpenAdvisories

Package · Ubuntu

netty-3.9

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2020-7238

    HTTP Request Smuggling in Netty

    Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

    netty netty io.netty:netty-handler netty-3.9 Debian Ubuntu Maven
  • High 7.5
    CVE-2019-16869

    HTTP Request Smuggling in Netty

    Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.

    druid netty netty io.netty:netty Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2015-2156

    Information Exposure in Netty

    Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveragin…

    netty netty io.netty:netty org.jboss.netty:netty Debian Ubuntu Maven