netty-tcnative vulnerabilities (SUSE)
94 vulnerabilities.
netty-tcnativeSUSENetty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted5.3 Mediumnetty-tcnativeSUSENetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Highnetty-tcnativeSUSENetty's wrapping plain trust manager silently disables hostname verification7.5 Highnetty-tcnativeSUSENetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Highnetty-tcnativeSUSEnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumnetty-tcnativeSUSENetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Highnetty-tcnativeSUSENetty has Insufficient Bailiwick Validation for NS Records8.7 Highnetty-tcnativeSUSENetty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced5.3 Mediumnetty-tcnativeSUSENetty: SCTP reassembly nests buffers without bound7.5 Highnetty-tcnativeSUSENetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Highnetty-tcnativeSUSENetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 Mediumnetty-tcnativeSUSENetty: Unix-socket fd receive leaks descriptors when peer sends two at once4.0 Mediumnetty-tcnativeSUSENetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Highnetty-tcnativeSUSENetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Highnetty-tcnativeSUSENetty: Denial of Service via Unbounded Headers in StompSubframeDecoder7.5 Highnetty-tcnativeSUSENetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Highnetty-tcnativeSUSENetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Highnetty-tcnativeSUSENetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Highnetty-tcnativeSUSENetty: Resource exhaustion in MqttDecoder5.3 Mediumnetty-tcnativeSUSENetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Highnetty-tcnativeSUSENetty: CRLF Injection in Netty Redis Codec Encoder6.8 Mediumnetty-tcnativeSUSENetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumnetty-tcnativeSUSENetty: HttpClientCodec response desynchronization7.3 Highnetty-tcnativeSUSENetty: Lz4FrameDecoder resource exhaustion7.5 Highnetty-tcnativeSUSENetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumnetty-tcnativeSUSENetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumnetty-tcnativeSUSENetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highnetty-tcnativeSUSENetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Lownetty-tcnativeSUSENetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumnetty-tcnativeSUSENetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Highnetty-tcnativeSUSENetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Highnetty-tcnativeSUSENetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 Mediumnetty-tcnativeSUSENetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 Mediumnetty-tcnativeSUSENetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Lownetty-tcnativeSUSENetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Highnetty-tcnativeSUSEDenial of Service attack on windows app using Netty5.5 Mediumnetty-tcnativeSUSESslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Highnetty-tcnativeSUSEDenial of Service attack on windows app using Netty5.5 Mediumnetty-tcnativeSUSENetty HttpPostRequestDecoder can OOM5.3 Mediumnetty-tcnativeSUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highnetty-tcnativeSUSEnetty-handler SniHandler 16MB allocation6.5 Mediumnetty-tcnativeSUSENetty vulnerable to HTTP Response splitting from assigning header value iterator6.5 Mediumnetty-tcnativeSUSEHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumnetty-tcnativeSUSELocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Medium