netty vulnerabilities (SUSE)
100 vulnerabilities.
nettySUSENetty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted5.3 MediumnettySUSENetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 HighnettySUSENetty's wrapping plain trust manager silently disables hostname verification7.5 HighnettySUSENetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 HighnettySUSEnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 MediumnettySUSENetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 HighnettySUSENetty has Insufficient Bailiwick Validation for NS Records8.7 HighnettySUSENetty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced5.3 MediumnettySUSENetty: SCTP reassembly nests buffers without bound7.5 HighnettySUSENetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 HighnettySUSENetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 MediumnettySUSENetty: Unix-socket fd receive leaks descriptors when peer sends two at once4.0 MediumnettySUSENetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 HighnettySUSENetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 HighnettySUSENetty: Denial of Service via Unbounded Headers in StompSubframeDecoder7.5 HighnettySUSENetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 HighnettySUSENetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 HighnettySUSENetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 HighnettySUSENetty: Resource exhaustion in MqttDecoder5.3 MediumnettySUSENetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 HighnettySUSENetty: CRLF Injection in Netty Redis Codec Encoder6.8 MediumnettySUSENetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 MediumnettySUSENetty: HttpClientCodec response desynchronization7.3 HighnettySUSENetty: Lz4FrameDecoder resource exhaustion7.5 HighnettySUSENetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 MediumnettySUSENetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 MediumnettySUSENetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 HighnettySUSENetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 LownettySUSENetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 MediumnettySUSENetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 HighnettySUSENetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 HighnettySUSENetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 MediumnettySUSENetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 MediumnettySUSENetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 MediumnettySUSENetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 LownettySUSENetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 HighnettySUSEDenial of Service attack on windows app using Netty5.5 MediumnettySUSESslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 HighnettySUSEDenial of Service attack on windows app using Netty5.5 MediumnettySUSENetty HttpPostRequestDecoder can OOM5.3 MediumnettySUSEEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighnettySUSEnetty-handler SniHandler 16MB allocation6.5 MediumnettySUSENetty vulnerable to HTTP Response splitting from assigning header value iterator6.5 MediumnettySUSEHAProxyMessageDecoder Stack Exhaustion DoS5.3 MediumnettySUSELocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 MediumnettySUSESnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 HighnettySUSEBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 HighnettySUSELocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 MediumnettySUSEDenial of Service in Netty7.5 HighnettySUSEApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser6.5 Medium