io.netty:netty-codec-mqtt vulnerabilities (TuxCare)
74 vulnerabilities.
io.netty:netty-codec-mqttTuxCareNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Mediumio.netty:netty-codec-mqttTuxCareNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Highio.netty:netty-codec-mqttTuxCareNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Lowio.netty:netty-codec-mqttTuxCareNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumio.netty:netty-codec-mqttTuxCareNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Highio.netty:netty-codec-mqttTuxCareNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Highio.netty:netty-codec-mqttTuxCareNetty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder6.5 Mediumio.netty:netty-codec-mqttTuxCareNetty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery5.5 Mediumio.netty:netty-codec-mqttTuxCareNetty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9 Mediumio.netty:netty-codec-mqttTuxCareNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Lowio.netty:netty-codec-mqttTuxCareNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Highio.netty:netty-codec-mqttTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-codec-mqttTuxCareSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Highio.netty:netty-codec-mqttTuxCareDenial of Service attack on windows app using Netty5.5 Mediumio.netty:netty-codec-mqttTuxCareNetty HttpPostRequestDecoder can OOM5.3 Mediumio.netty:netty-codec-mqttTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highio.netty:netty-codec-mqttTuxCarenetty-handler SniHandler 16MB allocation6.5 Mediumio.netty:netty-codec-mqttTuxCareHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumio.netty:netty-codec-mqttTuxCareLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumio.netty:netty-codec-mqttTuxCareHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumio.netty:netty-codec-mqttTuxCareSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highio.netty:netty-codec-mqttTuxCareBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Highio.netty:netty-codec-mqttTuxCarePossible request smuggling in HTTP/2 due missing validation5.9 Mediumio.netty:netty-codec-mqttTuxCareLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Medium