Skip to content
OpenAdvisories

Package · Ubuntu

netty-3.9

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-47535

    Denial of Service attack on windows app using Netty

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on a…

    netty netty netty sonarqube Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2022-41915

    Netty vulnerable to HTTP Response splitting from assigning header value iterator

    Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with an _iterator_ of values, header value validation was not performed, allowing ma…

    netty netty netty netty Debian Ubuntu Maven
  • Medium 5.3
    CVE-2022-41881

    HAProxyMessageDecoder Stack Exhaustion DoS

    Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

    netty netty netty netty Debian Ubuntu Maven
  • Medium —
    CVE-2019-20445 EPSS 14%

    HTTP Request Smuggling in Netty

    HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

    druid netty netty io.netty:netty-handler Debian Ubuntu Wolfi Maven