io.netty:netty-handler vulnerabilities (Maven)
12 vulnerabilities.
-
io.netty:netty-handlerMaven Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext 9.1 Critical -
io.netty:netty-handlerMaven Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing 8.7 High -
io.netty:netty-handlerMaven Netty's wrapping plain trust manager silently disables hostname verification 7.5 High -
io.netty:netty-handlerMaven Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes 7.5 High -
io.netty:netty-handlerMaven Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking 8.1 High -
io.netty:netty-handlerMaven SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 7.5 High -
io.netty:netty-handlerMaven netty-handler SniHandler 16MB allocation 6.5 Medium -
io.netty:netty-handlerMaven Denial of Service in Netty 7.5 High -
io.netty:netty-handlerMaven HTTP Request Smuggling in Netty 9.1 Critical -
io.netty:netty-handlerMaven HTTP Request Smuggling in Netty 7.5 High -
io.netty:netty-handlerMaven Loop with Unreachable Exit Condition in Netty 7.5 High -
io.netty:netty-handlerMaven Denial of service in Netty 5.0 Medium