io.netty:netty-codec-compression vulnerabilities (TuxCare)
20 vulnerabilities.
-
io.netty:netty-codec-compressionTuxCare Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled 8.3 High -
io.netty:netty-codec-compressionTuxCare Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion 8.7 High -
io.netty:netty-codec-compressionTuxCare Netty's wrapping plain trust manager silently disables hostname verification 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced 5.3 Medium -
io.netty:netty-codec-compressionTuxCare Netty: SCTP reassembly nests buffers without bound 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records 8.7 High -
io.netty:netty-codec-compressionTuxCare Netty: Unix-socket fd receive leaks descriptors when peer sends two at once 4.0 Medium -
io.netty:netty-codec-compressionTuxCare Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty has Unbounded Direct Memory Consumption in its RedisDecoder 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking 8.1 High -
io.netty:netty-codec-compressionTuxCare Netty: Resource exhaustion in MqttDecoder 5.3 Medium -
io.netty:netty-codec-compressionTuxCare Netty: HttpClientCodec response desynchronization 7.3 High -
io.netty:netty-codec-compressionTuxCare Netty: Lz4FrameDecoder resource exhaustion 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization 5.8 Medium -
io.netty:netty-codec-compressionTuxCare Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) 7.5 High -
io.netty:netty-codec-compressionTuxCare Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri() 5.3 Medium -
io.netty:netty-codec-compressionTuxCare Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery 5.5 Medium -
io.netty:netty-codec-compressionTuxCare Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 2.9 Low